static_resources: listeners: - address: socket_address: address: 0.0.0.0 port_value: 8000 filter_chains: - filters: - name: envoy.filters.network.http_connection_manager typed_config: "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager codec_type: AUTO stat_prefix: ingress_http route_config: name: local_route virtual_hosts: - name: upstream domains: - "*" routes: - match: prefix: "/" route: cluster: upstream-service http_filters: - name: envoy.filters.http.ext_authz typed_config: "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz grpc_service: envoy_grpc: cluster_name: ext_authz-grpc-service timeout: 0.250s transport_api_version: V3 - name: envoy.filters.http.router typed_config: "@type": type.googleapis.com/envoy.extensions.filters.http.router.v3.Router clusters: - name: upstream-service type: STRICT_DNS lb_policy: ROUND_ROBIN load_assignment: cluster_name: upstream-service endpoints: - lb_endpoints: - endpoint: address: socket_address: address: upstream-service port_value: 8080 - name: ext_authz-grpc-service type: STRICT_DNS lb_policy: ROUND_ROBIN typed_extension_protocol_options: envoy.extensions.upstreams.http.v3.HttpProtocolOptions: "@type": type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions explicit_http_config: http2_protocol_options: {} load_assignment: cluster_name: ext_authz-grpc-service endpoints: - lb_endpoints: - endpoint: address: socket_address: address: ext_authz-grpc-service port_value: 9001