Skip to content

Instantly share code, notes, and snippets.

@seifrajhi
Created January 24, 2024 06:30
Show Gist options
  • Save seifrajhi/07f39089f14bbc053548167a8d5c4291 to your computer and use it in GitHub Desktop.
Save seifrajhi/07f39089f14bbc053548167a8d5c4291 to your computer and use it in GitHub Desktop.
Istio extension provider specifics
meshConfig:
extensionProviders:
- name: oauth2-proxy
envoyExtAuthzHttp:
service: oauth2-proxy.oauth2-proxy.svc.cluster.local
port: 4180
headersToDownstreamOnDeny:
- content-type
- set-cookie
headersToUpstreamOnAllow:
- authorization
- path
- x-auth-request-user
- x-auth-request-email
- x-auth-request-access-token
includeHeadersInCheck:
- authorization
- cookie
defaultConfig:
terminationDrainDuration: 310s
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment