2

I am using envoy external auth filter in istio. It works version 1.6 and 1.7. But in version 1.8 it is not working anymore. I want to use version 1.8 but i could not manage to work with this version.

What should be problem ?

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: authn-filter
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      istio: ingressgateway
  configPatches:
    - applyTo: HTTP_FILTER
      match:
        context: GATEWAY
        listener:
          filterChain:
            filter:
              name: "envoy.http_connection_manager"
              subFilter:
                name: "envoy.router"
      patch:
        operation: INSERT_BEFORE
        value:
          name: envoy.ext_authz
          typed_config:
            "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
            clear_route_cache: true
            http_service:
              server_uri:
                uri: http://auth-http-service.default.svc.cluster.local
                cluster: outbound|3000||auth-http-service.default.svc.cluster.local
                timeout: 1.5s
              authorizationRequest:
                allowedHeaders:
                  patterns:
                    - exact: "cookie"
              authorizationResponse:
                allowedClientHeaders:
                  patterns:
                    - exact: "authorization"
                allowedUpstreamHeaders:
                  patterns:
                    - exact: "set-cookie"
                    - exact: "authorization"
Taha Ergun
  • 566
  • 2
  • 7
  • 17
  • 1
    Could you try with `envoy.filters.network.http_connection_manager`, `envoy.filters.http.ext_authz` and `envoy.filters.http.router` instead of `envoy.http_connection_manager`, `envoy.ext_authz and` and `envoy.router`? As mentioned [here](https://banzaicloud.com/blog/istio-1.8/) it is recommended that you use the new Envoy filter names, as some filter names were deprecated and will be removed in a future release. So that might cause the issue. – Jakub Dec 07 '20 at 10:42
  • 1
    still not works – Taha Ergun Dec 07 '20 at 19:19
  • Hey I finally had the time to upgrade from istio 1.7.x to 1.8 and everything works as expected. Is this still open? – Chris Jan 18 '21 at 13:51

0 Answers0