istio.io/istio@v0.0.0-20240520182934-d79c90f27776/istioctl/pkg/authz/testdata/configdump.yaml (about)

     1  {
     2   "configs": [
     3    {
     4     "@type": "type.googleapis.com/envoy.admin.v3.ListenersConfigDump",
     5     "version_info": "2023-06-20T09:08:58Z/4",
     6     "static_listeners": [
     7      {
     8       "listener": {
     9        "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
    10        "address": {
    11         "socket_address": {
    12          "address": "0.0.0.0",
    13          "port_value": 15090
    14         }
    15        },
    16        "filter_chains": [
    17         {
    18          "filters": [
    19           {
    20            "name": "envoy.filters.network.http_connection_manager",
    21            "typed_config": {
    22             "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
    23             "stat_prefix": "stats",
    24             "route_config": {
    25              "virtual_hosts": [
    26               {
    27                "name": "backend",
    28                "domains": [
    29                 "*"
    30                ],
    31                "routes": [
    32                 {
    33                  "match": {
    34                   "prefix": "/stats/prometheus"
    35                  },
    36                  "route": {
    37                   "cluster": "prometheus_stats"
    38                  }
    39                 }
    40                ]
    41               }
    42              ]
    43             },
    44             "http_filters": [
    45              {
    46               "name": "envoy.filters.http.router",
    47               "typed_config": {
    48                "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
    49               }
    50              }
    51             ]
    52            }
    53           }
    54          ]
    55         }
    56        ]
    57       },
    58       "last_updated": "2023-06-20T09:07:41.865Z"
    59      },
    60      {
    61       "listener": {
    62        "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
    63        "address": {
    64         "socket_address": {
    65          "address": "0.0.0.0",
    66          "port_value": 15021
    67         }
    68        },
    69        "filter_chains": [
    70         {
    71          "filters": [
    72           {
    73            "name": "envoy.filters.network.http_connection_manager",
    74            "typed_config": {
    75             "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
    76             "stat_prefix": "agent",
    77             "route_config": {
    78              "virtual_hosts": [
    79               {
    80                "name": "backend",
    81                "domains": [
    82                 "*"
    83                ],
    84                "routes": [
    85                 {
    86                  "match": {
    87                   "prefix": "/healthz/ready"
    88                  },
    89                  "route": {
    90                   "cluster": "agent"
    91                  }
    92                 }
    93                ]
    94               }
    95              ]
    96             },
    97             "http_filters": [
    98              {
    99               "name": "envoy.filters.http.router",
   100               "typed_config": {
   101                "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
   102               }
   103              }
   104             ]
   105            }
   106           }
   107          ]
   108         }
   109        ]
   110       },
   111       "last_updated": "2023-06-20T09:07:41.865Z"
   112      }
   113     ],
   114     "dynamic_listeners": [
   115      {
   116       "name": "10.102.11.148_15021",
   117       "active_state": {
   118        "version_info": "2023-06-20T09:07:41Z/3",
   119        "listener": {
   120         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   121         "name": "10.102.11.148_15021",
   122         "address": {
   123          "socket_address": {
   124           "address": "10.102.11.148",
   125           "port_value": 15021
   126          }
   127         },
   128         "filter_chains": [
   129          {
   130           "filters": [
   131            {
   132             "name": "istio.stats",
   133             "typed_config": {
   134              "@type": "type.googleapis.com/stats.PluginConfig"
   135             }
   136            },
   137            {
   138             "name": "envoy.filters.network.tcp_proxy",
   139             "typed_config": {
   140              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   141              "stat_prefix": "outbound|15021||ratings-istio-waypoint.ambient.svc.cluster.local",
   142              "cluster": "outbound|15021||ratings-istio-waypoint.ambient.svc.cluster.local"
   143             }
   144            }
   145           ]
   146          }
   147         ],
   148         "traffic_direction": "OUTBOUND",
   149         "bind_to_port": false
   150        },
   151        "last_updated": "2023-06-20T09:07:41.943Z"
   152       }
   153      },
   154      {
   155       "name": "10.108.65.203_443",
   156       "active_state": {
   157        "version_info": "2023-06-20T09:07:41Z/3",
   158        "listener": {
   159         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   160         "name": "10.108.65.203_443",
   161         "address": {
   162          "socket_address": {
   163           "address": "10.108.65.203",
   164           "port_value": 443
   165          }
   166         },
   167         "filter_chains": [
   168          {
   169           "filters": [
   170            {
   171             "name": "istio.stats",
   172             "typed_config": {
   173              "@type": "type.googleapis.com/stats.PluginConfig"
   174             }
   175            },
   176            {
   177             "name": "envoy.filters.network.tcp_proxy",
   178             "typed_config": {
   179              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   180              "stat_prefix": "outbound|443||istiod.istio-system.svc.cluster.local",
   181              "cluster": "outbound|443||istiod.istio-system.svc.cluster.local"
   182             }
   183            }
   184           ]
   185          }
   186         ],
   187         "traffic_direction": "OUTBOUND",
   188         "bind_to_port": false
   189        },
   190        "last_updated": "2023-06-20T09:07:41.943Z"
   191       }
   192      },
   193      {
   194       "name": "10.96.0.1_443",
   195       "active_state": {
   196        "version_info": "2023-06-20T09:07:41Z/3",
   197        "listener": {
   198         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   199         "name": "10.96.0.1_443",
   200         "address": {
   201          "socket_address": {
   202           "address": "10.96.0.1",
   203           "port_value": 443
   204          }
   205         },
   206         "filter_chains": [
   207          {
   208           "filters": [
   209            {
   210             "name": "istio.stats",
   211             "typed_config": {
   212              "@type": "type.googleapis.com/stats.PluginConfig"
   213             }
   214            },
   215            {
   216             "name": "envoy.filters.network.tcp_proxy",
   217             "typed_config": {
   218              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   219              "stat_prefix": "outbound|443||kubernetes.default.svc.cluster.local",
   220              "cluster": "outbound|443||kubernetes.default.svc.cluster.local"
   221             }
   222            }
   223           ]
   224          }
   225         ],
   226         "traffic_direction": "OUTBOUND",
   227         "bind_to_port": false
   228        },
   229        "last_updated": "2023-06-20T09:07:41.943Z"
   230       }
   231      },
   232      {
   233       "name": "10.111.137.16_15021",
   234       "active_state": {
   235        "version_info": "2023-06-20T09:07:41Z/3",
   236        "listener": {
   237         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   238         "name": "10.111.137.16_15021",
   239         "address": {
   240          "socket_address": {
   241           "address": "10.111.137.16",
   242           "port_value": 15021
   243          }
   244         },
   245         "filter_chains": [
   246          {
   247           "filters": [
   248            {
   249             "name": "istio.stats",
   250             "typed_config": {
   251              "@type": "type.googleapis.com/stats.PluginConfig"
   252             }
   253            },
   254            {
   255             "name": "envoy.filters.network.tcp_proxy",
   256             "typed_config": {
   257              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   258              "stat_prefix": "outbound|15021||reviews-istio-waypoint.ambient.svc.cluster.local",
   259              "cluster": "outbound|15021||reviews-istio-waypoint.ambient.svc.cluster.local"
   260             }
   261            }
   262           ]
   263          }
   264         ],
   265         "traffic_direction": "OUTBOUND",
   266         "bind_to_port": false
   267        },
   268        "last_updated": "2023-06-20T09:07:41.943Z"
   269       }
   270      },
   271      {
   272       "name": "10.98.166.148_443",
   273       "active_state": {
   274        "version_info": "2023-06-20T09:07:41Z/3",
   275        "listener": {
   276         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   277         "name": "10.98.166.148_443",
   278         "address": {
   279          "socket_address": {
   280           "address": "10.98.166.148",
   281           "port_value": 443
   282          }
   283         },
   284         "filter_chains": [
   285          {
   286           "filters": [
   287            {
   288             "name": "istio.stats",
   289             "typed_config": {
   290              "@type": "type.googleapis.com/stats.PluginConfig"
   291             }
   292            },
   293            {
   294             "name": "envoy.filters.network.tcp_proxy",
   295             "typed_config": {
   296              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   297              "stat_prefix": "outbound|443||gateway-api-admission-server.gateway-system.svc.cluster.local",
   298              "cluster": "outbound|443||gateway-api-admission-server.gateway-system.svc.cluster.local"
   299             }
   300            }
   301           ]
   302          }
   303         ],
   304         "traffic_direction": "OUTBOUND",
   305         "bind_to_port": false
   306        },
   307        "last_updated": "2023-06-20T09:07:41.944Z"
   308       }
   309      },
   310      {
   311       "name": "10.100.160.191_15021",
   312       "active_state": {
   313        "version_info": "2023-06-20T09:07:41Z/3",
   314        "listener": {
   315         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   316         "name": "10.100.160.191_15021",
   317         "address": {
   318          "socket_address": {
   319           "address": "10.100.160.191",
   320           "port_value": 15021
   321          }
   322         },
   323         "filter_chains": [
   324          {
   325           "filters": [
   326            {
   327             "name": "istio.stats",
   328             "typed_config": {
   329              "@type": "type.googleapis.com/stats.PluginConfig"
   330             }
   331            },
   332            {
   333             "name": "envoy.filters.network.tcp_proxy",
   334             "typed_config": {
   335              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   336              "stat_prefix": "outbound|15021||gateway-istio.istio-ingress.svc.cluster.local",
   337              "cluster": "outbound|15021||gateway-istio.istio-ingress.svc.cluster.local"
   338             }
   339            }
   340           ]
   341          }
   342         ],
   343         "traffic_direction": "OUTBOUND",
   344         "bind_to_port": false
   345        },
   346        "last_updated": "2023-06-20T09:07:41.944Z"
   347       }
   348      },
   349      {
   350       "name": "10.109.111.153_15021",
   351       "active_state": {
   352        "version_info": "2023-06-20T09:07:41Z/3",
   353        "listener": {
   354         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   355         "name": "10.109.111.153_15021",
   356         "address": {
   357          "socket_address": {
   358           "address": "10.109.111.153",
   359           "port_value": 15021
   360          }
   361         },
   362         "filter_chains": [
   363          {
   364           "filters": [
   365            {
   366             "name": "istio.stats",
   367             "typed_config": {
   368              "@type": "type.googleapis.com/stats.PluginConfig"
   369             }
   370            },
   371            {
   372             "name": "envoy.filters.network.tcp_proxy",
   373             "typed_config": {
   374              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   375              "stat_prefix": "outbound|15021||httpbin-istio-waypoint.ambient.svc.cluster.local",
   376              "cluster": "outbound|15021||httpbin-istio-waypoint.ambient.svc.cluster.local"
   377             }
   378            }
   379           ]
   380          }
   381         ],
   382         "traffic_direction": "OUTBOUND",
   383         "bind_to_port": false
   384        },
   385        "last_updated": "2023-06-20T09:07:41.944Z"
   386       }
   387      },
   388      {
   389       "name": "10.100.228.83_15021",
   390       "active_state": {
   391        "version_info": "2023-06-20T09:07:41Z/3",
   392        "listener": {
   393         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   394         "name": "10.100.228.83_15021",
   395         "address": {
   396          "socket_address": {
   397           "address": "10.100.228.83",
   398           "port_value": 15021
   399          }
   400         },
   401         "filter_chains": [
   402          {
   403           "filters": [
   404            {
   405             "name": "istio.stats",
   406             "typed_config": {
   407              "@type": "type.googleapis.com/stats.PluginConfig"
   408             }
   409            },
   410            {
   411             "name": "envoy.filters.network.tcp_proxy",
   412             "typed_config": {
   413              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   414              "stat_prefix": "outbound|15021||productpage-istio-waypoint.ambient.svc.cluster.local",
   415              "cluster": "outbound|15021||productpage-istio-waypoint.ambient.svc.cluster.local"
   416             }
   417            }
   418           ]
   419          }
   420         ],
   421         "traffic_direction": "OUTBOUND",
   422         "bind_to_port": false
   423        },
   424        "last_updated": "2023-06-20T09:07:41.944Z"
   425       }
   426      },
   427      {
   428       "name": "10.96.0.10_53",
   429       "active_state": {
   430        "version_info": "2023-06-20T09:07:41Z/3",
   431        "listener": {
   432         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   433         "name": "10.96.0.10_53",
   434         "address": {
   435          "socket_address": {
   436           "address": "10.96.0.10",
   437           "port_value": 53
   438          }
   439         },
   440         "filter_chains": [
   441          {
   442           "filters": [
   443            {
   444             "name": "istio.stats",
   445             "typed_config": {
   446              "@type": "type.googleapis.com/stats.PluginConfig"
   447             }
   448            },
   449            {
   450             "name": "envoy.filters.network.tcp_proxy",
   451             "typed_config": {
   452              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   453              "stat_prefix": "outbound|53||kube-dns.kube-system.svc.cluster.local",
   454              "cluster": "outbound|53||kube-dns.kube-system.svc.cluster.local"
   455             }
   456            }
   457           ]
   458          }
   459         ],
   460         "traffic_direction": "OUTBOUND",
   461         "bind_to_port": false
   462        },
   463        "last_updated": "2023-06-20T09:07:41.944Z"
   464       }
   465      },
   466      {
   467       "name": "10.108.65.203_15012",
   468       "active_state": {
   469        "version_info": "2023-06-20T09:07:41Z/3",
   470        "listener": {
   471         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   472         "name": "10.108.65.203_15012",
   473         "address": {
   474          "socket_address": {
   475           "address": "10.108.65.203",
   476           "port_value": 15012
   477          }
   478         },
   479         "filter_chains": [
   480          {
   481           "filters": [
   482            {
   483             "name": "istio.stats",
   484             "typed_config": {
   485              "@type": "type.googleapis.com/stats.PluginConfig"
   486             }
   487            },
   488            {
   489             "name": "envoy.filters.network.tcp_proxy",
   490             "typed_config": {
   491              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   492              "stat_prefix": "outbound|15012||istiod.istio-system.svc.cluster.local",
   493              "cluster": "outbound|15012||istiod.istio-system.svc.cluster.local"
   494             }
   495            }
   496           ]
   497          }
   498         ],
   499         "traffic_direction": "OUTBOUND",
   500         "bind_to_port": false
   501        },
   502        "last_updated": "2023-06-20T09:07:41.944Z"
   503       }
   504      },
   505      {
   506       "name": "0.0.0.0_9080",
   507       "active_state": {
   508        "version_info": "2023-06-20T09:07:41Z/3",
   509        "listener": {
   510         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   511         "name": "0.0.0.0_9080",
   512         "address": {
   513          "socket_address": {
   514           "address": "0.0.0.0",
   515           "port_value": 9080
   516          }
   517         },
   518         "filter_chains": [
   519          {
   520           "filter_chain_match": {
   521            "transport_protocol": "raw_buffer",
   522            "application_protocols": [
   523             "http/1.1",
   524             "h2c"
   525            ]
   526           },
   527           "filters": [
   528            {
   529             "name": "envoy.filters.network.http_connection_manager",
   530             "typed_config": {
   531              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
   532              "stat_prefix": "outbound_0.0.0.0_9080",
   533              "rds": {
   534               "config_source": {
   535                "ads": {},
   536                "initial_fetch_timeout": "0s",
   537                "resource_api_version": "V3"
   538               },
   539               "route_config_name": "9080"
   540              },
   541              "http_filters": [
   542               {
   543                "name": "istio.metadata_exchange",
   544                "typed_config": {
   545                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
   546                 "config": {
   547                  "vm_config": {
   548                   "runtime": "envoy.wasm.runtime.null",
   549                   "code": {
   550                    "local": {
   551                     "inline_string": "envoy.wasm.metadata_exchange"
   552                    }
   553                   }
   554                  },
   555                  "configuration": {
   556                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
   557                  }
   558                 }
   559                }
   560               },
   561               {
   562                "name": "envoy.filters.http.grpc_stats",
   563                "typed_config": {
   564                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
   565                 "emit_filter_state": true,
   566                 "stats_for_all_methods": false
   567                }
   568               },
   569               {
   570                "name": "istio.alpn",
   571                "typed_config": {
   572                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
   573                 "alpn_override": [
   574                  {
   575                   "alpn_override": [
   576                    "istio-http/1.0",
   577                    "istio",
   578                    "http/1.0"
   579                   ]
   580                  },
   581                  {
   582                   "upstream_protocol": "HTTP11",
   583                   "alpn_override": [
   584                    "istio-http/1.1",
   585                    "istio",
   586                    "http/1.1"
   587                   ]
   588                  },
   589                  {
   590                   "upstream_protocol": "HTTP2",
   591                   "alpn_override": [
   592                    "istio-h2",
   593                    "istio",
   594                    "h2"
   595                   ]
   596                  }
   597                 ]
   598                }
   599               },
   600               {
   601                "name": "envoy.filters.http.fault",
   602                "typed_config": {
   603                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
   604                }
   605               },
   606               {
   607                "name": "envoy.filters.http.cors",
   608                "typed_config": {
   609                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
   610                }
   611               },
   612               {
   613                "name": "istio.stats",
   614                "typed_config": {
   615                 "@type": "type.googleapis.com/stats.PluginConfig"
   616                }
   617               },
   618               {
   619                "name": "envoy.filters.http.router",
   620                "typed_config": {
   621                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
   622                }
   623               }
   624              ],
   625              "tracing": {
   626               "client_sampling": {
   627                "value": 100
   628               },
   629               "random_sampling": {
   630                "value": 1
   631               },
   632               "overall_sampling": {
   633                "value": 100
   634               },
   635               "custom_tags": [
   636                {
   637                 "tag": "istio.authorization.dry_run.allow_policy.name",
   638                 "metadata": {
   639                  "kind": {
   640                   "request": {}
   641                  },
   642                  "metadata_key": {
   643                   "key": "envoy.filters.http.rbac",
   644                   "path": [
   645                    {
   646                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
   647                    }
   648                   ]
   649                  }
   650                 }
   651                },
   652                {
   653                 "tag": "istio.authorization.dry_run.allow_policy.result",
   654                 "metadata": {
   655                  "kind": {
   656                   "request": {}
   657                  },
   658                  "metadata_key": {
   659                   "key": "envoy.filters.http.rbac",
   660                   "path": [
   661                    {
   662                     "key": "istio_dry_run_allow_shadow_engine_result"
   663                    }
   664                   ]
   665                  }
   666                 }
   667                },
   668                {
   669                 "tag": "istio.authorization.dry_run.deny_policy.name",
   670                 "metadata": {
   671                  "kind": {
   672                   "request": {}
   673                  },
   674                  "metadata_key": {
   675                   "key": "envoy.filters.http.rbac",
   676                   "path": [
   677                    {
   678                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
   679                    }
   680                   ]
   681                  }
   682                 }
   683                },
   684                {
   685                 "tag": "istio.authorization.dry_run.deny_policy.result",
   686                 "metadata": {
   687                  "kind": {
   688                   "request": {}
   689                  },
   690                  "metadata_key": {
   691                   "key": "envoy.filters.http.rbac",
   692                   "path": [
   693                    {
   694                     "key": "istio_dry_run_deny_shadow_engine_result"
   695                    }
   696                   ]
   697                  }
   698                 }
   699                },
   700                {
   701                 "tag": "istio.canonical_revision",
   702                 "literal": {
   703                  "value": "v1"
   704                 }
   705                },
   706                {
   707                 "tag": "istio.canonical_service",
   708                 "literal": {
   709                  "value": "httpbin"
   710                 }
   711                },
   712                {
   713                 "tag": "istio.mesh_id",
   714                 "literal": {
   715                  "value": "cluster.local"
   716                 }
   717                },
   718                {
   719                 "tag": "istio.namespace",
   720                 "literal": {
   721                  "value": "default"
   722                 }
   723                }
   724               ]
   725              },
   726              "use_remote_address": false,
   727              "upgrade_configs": [
   728               {
   729                "upgrade_type": "websocket"
   730               }
   731              ],
   732              "stream_idle_timeout": "0s",
   733              "normalize_path": true,
   734              "request_id_extension": {
   735               "typed_config": {
   736                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
   737                "use_request_id_for_trace_sampling": true
   738               }
   739              },
   740              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
   741             }
   742            }
   743           ]
   744          }
   745         ],
   746         "listener_filters": [
   747          {
   748           "name": "envoy.filters.listener.tls_inspector",
   749           "typed_config": {
   750            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
   751           }
   752          },
   753          {
   754           "name": "envoy.filters.listener.http_inspector",
   755           "typed_config": {
   756            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
   757           }
   758          }
   759         ],
   760         "listener_filters_timeout": "0s",
   761         "traffic_direction": "OUTBOUND",
   762         "continue_on_listener_filters_timeout": true,
   763         "default_filter_chain": {
   764          "filter_chain_match": {},
   765          "filters": [
   766           {
   767            "name": "istio.stats",
   768            "typed_config": {
   769             "@type": "type.googleapis.com/stats.PluginConfig"
   770            }
   771           },
   772           {
   773            "name": "envoy.filters.network.tcp_proxy",
   774            "typed_config": {
   775             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
   776             "stat_prefix": "PassthroughCluster",
   777             "cluster": "PassthroughCluster"
   778            }
   779           }
   780          ],
   781          "name": "PassthroughFilterChain"
   782         },
   783         "bind_to_port": false
   784        },
   785        "last_updated": "2023-06-20T09:07:41.955Z"
   786       }
   787      },
   788      {
   789       "name": "0.0.0.0_80",
   790       "active_state": {
   791        "version_info": "2023-06-20T09:07:41Z/3",
   792        "listener": {
   793         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
   794         "name": "0.0.0.0_80",
   795         "address": {
   796          "socket_address": {
   797           "address": "0.0.0.0",
   798           "port_value": 80
   799          }
   800         },
   801         "filter_chains": [
   802          {
   803           "filter_chain_match": {
   804            "transport_protocol": "raw_buffer",
   805            "application_protocols": [
   806             "http/1.1",
   807             "h2c"
   808            ]
   809           },
   810           "filters": [
   811            {
   812             "name": "envoy.filters.network.http_connection_manager",
   813             "typed_config": {
   814              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
   815              "stat_prefix": "outbound_0.0.0.0_80",
   816              "rds": {
   817               "config_source": {
   818                "ads": {},
   819                "initial_fetch_timeout": "0s",
   820                "resource_api_version": "V3"
   821               },
   822               "route_config_name": "80"
   823              },
   824              "http_filters": [
   825               {
   826                "name": "istio.metadata_exchange",
   827                "typed_config": {
   828                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
   829                 "config": {
   830                  "vm_config": {
   831                   "runtime": "envoy.wasm.runtime.null",
   832                   "code": {
   833                    "local": {
   834                     "inline_string": "envoy.wasm.metadata_exchange"
   835                    }
   836                   }
   837                  },
   838                  "configuration": {
   839                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
   840                  }
   841                 }
   842                }
   843               },
   844               {
   845                "name": "envoy.filters.http.grpc_stats",
   846                "typed_config": {
   847                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
   848                 "emit_filter_state": true,
   849                 "stats_for_all_methods": false
   850                }
   851               },
   852               {
   853                "name": "istio.alpn",
   854                "typed_config": {
   855                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
   856                 "alpn_override": [
   857                  {
   858                   "alpn_override": [
   859                    "istio-http/1.0",
   860                    "istio",
   861                    "http/1.0"
   862                   ]
   863                  },
   864                  {
   865                   "upstream_protocol": "HTTP11",
   866                   "alpn_override": [
   867                    "istio-http/1.1",
   868                    "istio",
   869                    "http/1.1"
   870                   ]
   871                  },
   872                  {
   873                   "upstream_protocol": "HTTP2",
   874                   "alpn_override": [
   875                    "istio-h2",
   876                    "istio",
   877                    "h2"
   878                   ]
   879                  }
   880                 ]
   881                }
   882               },
   883               {
   884                "name": "envoy.filters.http.fault",
   885                "typed_config": {
   886                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
   887                }
   888               },
   889               {
   890                "name": "envoy.filters.http.cors",
   891                "typed_config": {
   892                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
   893                }
   894               },
   895               {
   896                "name": "istio.stats",
   897                "typed_config": {
   898                 "@type": "type.googleapis.com/stats.PluginConfig"
   899                }
   900               },
   901               {
   902                "name": "envoy.filters.http.router",
   903                "typed_config": {
   904                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
   905                }
   906               }
   907              ],
   908              "tracing": {
   909               "client_sampling": {
   910                "value": 100
   911               },
   912               "random_sampling": {
   913                "value": 1
   914               },
   915               "overall_sampling": {
   916                "value": 100
   917               },
   918               "custom_tags": [
   919                {
   920                 "tag": "istio.authorization.dry_run.allow_policy.name",
   921                 "metadata": {
   922                  "kind": {
   923                   "request": {}
   924                  },
   925                  "metadata_key": {
   926                   "key": "envoy.filters.http.rbac",
   927                   "path": [
   928                    {
   929                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
   930                    }
   931                   ]
   932                  }
   933                 }
   934                },
   935                {
   936                 "tag": "istio.authorization.dry_run.allow_policy.result",
   937                 "metadata": {
   938                  "kind": {
   939                   "request": {}
   940                  },
   941                  "metadata_key": {
   942                   "key": "envoy.filters.http.rbac",
   943                   "path": [
   944                    {
   945                     "key": "istio_dry_run_allow_shadow_engine_result"
   946                    }
   947                   ]
   948                  }
   949                 }
   950                },
   951                {
   952                 "tag": "istio.authorization.dry_run.deny_policy.name",
   953                 "metadata": {
   954                  "kind": {
   955                   "request": {}
   956                  },
   957                  "metadata_key": {
   958                   "key": "envoy.filters.http.rbac",
   959                   "path": [
   960                    {
   961                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
   962                    }
   963                   ]
   964                  }
   965                 }
   966                },
   967                {
   968                 "tag": "istio.authorization.dry_run.deny_policy.result",
   969                 "metadata": {
   970                  "kind": {
   971                   "request": {}
   972                  },
   973                  "metadata_key": {
   974                   "key": "envoy.filters.http.rbac",
   975                   "path": [
   976                    {
   977                     "key": "istio_dry_run_deny_shadow_engine_result"
   978                    }
   979                   ]
   980                  }
   981                 }
   982                },
   983                {
   984                 "tag": "istio.canonical_revision",
   985                 "literal": {
   986                  "value": "v1"
   987                 }
   988                },
   989                {
   990                 "tag": "istio.canonical_service",
   991                 "literal": {
   992                  "value": "httpbin"
   993                 }
   994                },
   995                {
   996                 "tag": "istio.mesh_id",
   997                 "literal": {
   998                  "value": "cluster.local"
   999                 }
  1000                },
  1001                {
  1002                 "tag": "istio.namespace",
  1003                 "literal": {
  1004                  "value": "default"
  1005                 }
  1006                }
  1007               ]
  1008              },
  1009              "use_remote_address": false,
  1010              "upgrade_configs": [
  1011               {
  1012                "upgrade_type": "websocket"
  1013               }
  1014              ],
  1015              "stream_idle_timeout": "0s",
  1016              "normalize_path": true,
  1017              "request_id_extension": {
  1018               "typed_config": {
  1019                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  1020                "use_request_id_for_trace_sampling": true
  1021               }
  1022              },
  1023              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  1024             }
  1025            }
  1026           ]
  1027          }
  1028         ],
  1029         "listener_filters": [
  1030          {
  1031           "name": "envoy.filters.listener.tls_inspector",
  1032           "typed_config": {
  1033            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  1034           }
  1035          },
  1036          {
  1037           "name": "envoy.filters.listener.http_inspector",
  1038           "typed_config": {
  1039            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  1040           }
  1041          }
  1042         ],
  1043         "listener_filters_timeout": "0s",
  1044         "traffic_direction": "OUTBOUND",
  1045         "continue_on_listener_filters_timeout": true,
  1046         "default_filter_chain": {
  1047          "filter_chain_match": {},
  1048          "filters": [
  1049           {
  1050            "name": "istio.stats",
  1051            "typed_config": {
  1052             "@type": "type.googleapis.com/stats.PluginConfig"
  1053            }
  1054           },
  1055           {
  1056            "name": "envoy.filters.network.tcp_proxy",
  1057            "typed_config": {
  1058             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  1059             "stat_prefix": "PassthroughCluster",
  1060             "cluster": "PassthroughCluster"
  1061            }
  1062           }
  1063          ],
  1064          "name": "PassthroughFilterChain"
  1065         },
  1066         "bind_to_port": false
  1067        },
  1068        "last_updated": "2023-06-20T09:07:41.957Z"
  1069       }
  1070      },
  1071      {
  1072       "name": "10.109.111.153_15008",
  1073       "active_state": {
  1074        "version_info": "2023-06-20T09:07:41Z/3",
  1075        "listener": {
  1076         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  1077         "name": "10.109.111.153_15008",
  1078         "address": {
  1079          "socket_address": {
  1080           "address": "10.109.111.153",
  1081           "port_value": 15008
  1082          }
  1083         },
  1084         "filter_chains": [
  1085          {
  1086           "filter_chain_match": {
  1087            "transport_protocol": "raw_buffer",
  1088            "application_protocols": [
  1089             "http/1.1",
  1090             "h2c"
  1091            ]
  1092           },
  1093           "filters": [
  1094            {
  1095             "name": "envoy.filters.network.http_connection_manager",
  1096             "typed_config": {
  1097              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  1098              "stat_prefix": "outbound_10.109.111.153_15008",
  1099              "rds": {
  1100               "config_source": {
  1101                "ads": {},
  1102                "initial_fetch_timeout": "0s",
  1103                "resource_api_version": "V3"
  1104               },
  1105               "route_config_name": "httpbin-istio-waypoint.ambient.svc.cluster.local:15008"
  1106              },
  1107              "http_filters": [
  1108               {
  1109                "name": "istio.metadata_exchange",
  1110                "typed_config": {
  1111                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  1112                 "config": {
  1113                  "vm_config": {
  1114                   "runtime": "envoy.wasm.runtime.null",
  1115                   "code": {
  1116                    "local": {
  1117                     "inline_string": "envoy.wasm.metadata_exchange"
  1118                    }
  1119                   }
  1120                  },
  1121                  "configuration": {
  1122                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  1123                  }
  1124                 }
  1125                }
  1126               },
  1127               {
  1128                "name": "envoy.filters.http.grpc_stats",
  1129                "typed_config": {
  1130                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  1131                 "emit_filter_state": true,
  1132                 "stats_for_all_methods": false
  1133                }
  1134               },
  1135               {
  1136                "name": "istio.alpn",
  1137                "typed_config": {
  1138                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  1139                 "alpn_override": [
  1140                  {
  1141                   "alpn_override": [
  1142                    "istio-http/1.0",
  1143                    "istio",
  1144                    "http/1.0"
  1145                   ]
  1146                  },
  1147                  {
  1148                   "upstream_protocol": "HTTP11",
  1149                   "alpn_override": [
  1150                    "istio-http/1.1",
  1151                    "istio",
  1152                    "http/1.1"
  1153                   ]
  1154                  },
  1155                  {
  1156                   "upstream_protocol": "HTTP2",
  1157                   "alpn_override": [
  1158                    "istio-h2",
  1159                    "istio",
  1160                    "h2"
  1161                   ]
  1162                  }
  1163                 ]
  1164                }
  1165               },
  1166               {
  1167                "name": "envoy.filters.http.fault",
  1168                "typed_config": {
  1169                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  1170                }
  1171               },
  1172               {
  1173                "name": "envoy.filters.http.cors",
  1174                "typed_config": {
  1175                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  1176                }
  1177               },
  1178               {
  1179                "name": "istio.stats",
  1180                "typed_config": {
  1181                 "@type": "type.googleapis.com/stats.PluginConfig"
  1182                }
  1183               },
  1184               {
  1185                "name": "envoy.filters.http.router",
  1186                "typed_config": {
  1187                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  1188                }
  1189               }
  1190              ],
  1191              "tracing": {
  1192               "client_sampling": {
  1193                "value": 100
  1194               },
  1195               "random_sampling": {
  1196                "value": 1
  1197               },
  1198               "overall_sampling": {
  1199                "value": 100
  1200               },
  1201               "custom_tags": [
  1202                {
  1203                 "tag": "istio.authorization.dry_run.allow_policy.name",
  1204                 "metadata": {
  1205                  "kind": {
  1206                   "request": {}
  1207                  },
  1208                  "metadata_key": {
  1209                   "key": "envoy.filters.http.rbac",
  1210                   "path": [
  1211                    {
  1212                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  1213                    }
  1214                   ]
  1215                  }
  1216                 }
  1217                },
  1218                {
  1219                 "tag": "istio.authorization.dry_run.allow_policy.result",
  1220                 "metadata": {
  1221                  "kind": {
  1222                   "request": {}
  1223                  },
  1224                  "metadata_key": {
  1225                   "key": "envoy.filters.http.rbac",
  1226                   "path": [
  1227                    {
  1228                     "key": "istio_dry_run_allow_shadow_engine_result"
  1229                    }
  1230                   ]
  1231                  }
  1232                 }
  1233                },
  1234                {
  1235                 "tag": "istio.authorization.dry_run.deny_policy.name",
  1236                 "metadata": {
  1237                  "kind": {
  1238                   "request": {}
  1239                  },
  1240                  "metadata_key": {
  1241                   "key": "envoy.filters.http.rbac",
  1242                   "path": [
  1243                    {
  1244                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  1245                    }
  1246                   ]
  1247                  }
  1248                 }
  1249                },
  1250                {
  1251                 "tag": "istio.authorization.dry_run.deny_policy.result",
  1252                 "metadata": {
  1253                  "kind": {
  1254                   "request": {}
  1255                  },
  1256                  "metadata_key": {
  1257                   "key": "envoy.filters.http.rbac",
  1258                   "path": [
  1259                    {
  1260                     "key": "istio_dry_run_deny_shadow_engine_result"
  1261                    }
  1262                   ]
  1263                  }
  1264                 }
  1265                },
  1266                {
  1267                 "tag": "istio.canonical_revision",
  1268                 "literal": {
  1269                  "value": "v1"
  1270                 }
  1271                },
  1272                {
  1273                 "tag": "istio.canonical_service",
  1274                 "literal": {
  1275                  "value": "httpbin"
  1276                 }
  1277                },
  1278                {
  1279                 "tag": "istio.mesh_id",
  1280                 "literal": {
  1281                  "value": "cluster.local"
  1282                 }
  1283                },
  1284                {
  1285                 "tag": "istio.namespace",
  1286                 "literal": {
  1287                  "value": "default"
  1288                 }
  1289                }
  1290               ]
  1291              },
  1292              "use_remote_address": false,
  1293              "upgrade_configs": [
  1294               {
  1295                "upgrade_type": "websocket"
  1296               }
  1297              ],
  1298              "stream_idle_timeout": "0s",
  1299              "normalize_path": true,
  1300              "request_id_extension": {
  1301               "typed_config": {
  1302                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  1303                "use_request_id_for_trace_sampling": true
  1304               }
  1305              },
  1306              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  1307             }
  1308            }
  1309           ]
  1310          }
  1311         ],
  1312         "listener_filters": [
  1313          {
  1314           "name": "envoy.filters.listener.tls_inspector",
  1315           "typed_config": {
  1316            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  1317           }
  1318          },
  1319          {
  1320           "name": "envoy.filters.listener.http_inspector",
  1321           "typed_config": {
  1322            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  1323           }
  1324          }
  1325         ],
  1326         "listener_filters_timeout": "0s",
  1327         "traffic_direction": "OUTBOUND",
  1328         "continue_on_listener_filters_timeout": true,
  1329         "default_filter_chain": {
  1330          "filters": [
  1331           {
  1332            "name": "istio.stats",
  1333            "typed_config": {
  1334             "@type": "type.googleapis.com/stats.PluginConfig"
  1335            }
  1336           },
  1337           {
  1338            "name": "envoy.filters.network.tcp_proxy",
  1339            "typed_config": {
  1340             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  1341             "stat_prefix": "outbound|15008||httpbin-istio-waypoint.ambient.svc.cluster.local",
  1342             "cluster": "outbound|15008||httpbin-istio-waypoint.ambient.svc.cluster.local"
  1343            }
  1344           }
  1345          ]
  1346         },
  1347         "bind_to_port": false
  1348        },
  1349        "last_updated": "2023-06-20T09:07:41.958Z"
  1350       }
  1351      },
  1352      {
  1353       "name": "10.111.137.16_15008",
  1354       "active_state": {
  1355        "version_info": "2023-06-20T09:07:41Z/3",
  1356        "listener": {
  1357         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  1358         "name": "10.111.137.16_15008",
  1359         "address": {
  1360          "socket_address": {
  1361           "address": "10.111.137.16",
  1362           "port_value": 15008
  1363          }
  1364         },
  1365         "filter_chains": [
  1366          {
  1367           "filter_chain_match": {
  1368            "transport_protocol": "raw_buffer",
  1369            "application_protocols": [
  1370             "http/1.1",
  1371             "h2c"
  1372            ]
  1373           },
  1374           "filters": [
  1375            {
  1376             "name": "envoy.filters.network.http_connection_manager",
  1377             "typed_config": {
  1378              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  1379              "stat_prefix": "outbound_10.111.137.16_15008",
  1380              "rds": {
  1381               "config_source": {
  1382                "ads": {},
  1383                "initial_fetch_timeout": "0s",
  1384                "resource_api_version": "V3"
  1385               },
  1386               "route_config_name": "reviews-istio-waypoint.ambient.svc.cluster.local:15008"
  1387              },
  1388              "http_filters": [
  1389               {
  1390                "name": "istio.metadata_exchange",
  1391                "typed_config": {
  1392                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  1393                 "config": {
  1394                  "vm_config": {
  1395                   "runtime": "envoy.wasm.runtime.null",
  1396                   "code": {
  1397                    "local": {
  1398                     "inline_string": "envoy.wasm.metadata_exchange"
  1399                    }
  1400                   }
  1401                  },
  1402                  "configuration": {
  1403                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  1404                  }
  1405                 }
  1406                }
  1407               },
  1408               {
  1409                "name": "envoy.filters.http.grpc_stats",
  1410                "typed_config": {
  1411                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  1412                 "emit_filter_state": true,
  1413                 "stats_for_all_methods": false
  1414                }
  1415               },
  1416               {
  1417                "name": "istio.alpn",
  1418                "typed_config": {
  1419                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  1420                 "alpn_override": [
  1421                  {
  1422                   "alpn_override": [
  1423                    "istio-http/1.0",
  1424                    "istio",
  1425                    "http/1.0"
  1426                   ]
  1427                  },
  1428                  {
  1429                   "upstream_protocol": "HTTP11",
  1430                   "alpn_override": [
  1431                    "istio-http/1.1",
  1432                    "istio",
  1433                    "http/1.1"
  1434                   ]
  1435                  },
  1436                  {
  1437                   "upstream_protocol": "HTTP2",
  1438                   "alpn_override": [
  1439                    "istio-h2",
  1440                    "istio",
  1441                    "h2"
  1442                   ]
  1443                  }
  1444                 ]
  1445                }
  1446               },
  1447               {
  1448                "name": "envoy.filters.http.fault",
  1449                "typed_config": {
  1450                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  1451                }
  1452               },
  1453               {
  1454                "name": "envoy.filters.http.cors",
  1455                "typed_config": {
  1456                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  1457                }
  1458               },
  1459               {
  1460                "name": "istio.stats",
  1461                "typed_config": {
  1462                 "@type": "type.googleapis.com/stats.PluginConfig"
  1463                }
  1464               },
  1465               {
  1466                "name": "envoy.filters.http.router",
  1467                "typed_config": {
  1468                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  1469                }
  1470               }
  1471              ],
  1472              "tracing": {
  1473               "client_sampling": {
  1474                "value": 100
  1475               },
  1476               "random_sampling": {
  1477                "value": 1
  1478               },
  1479               "overall_sampling": {
  1480                "value": 100
  1481               },
  1482               "custom_tags": [
  1483                {
  1484                 "tag": "istio.authorization.dry_run.allow_policy.name",
  1485                 "metadata": {
  1486                  "kind": {
  1487                   "request": {}
  1488                  },
  1489                  "metadata_key": {
  1490                   "key": "envoy.filters.http.rbac",
  1491                   "path": [
  1492                    {
  1493                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  1494                    }
  1495                   ]
  1496                  }
  1497                 }
  1498                },
  1499                {
  1500                 "tag": "istio.authorization.dry_run.allow_policy.result",
  1501                 "metadata": {
  1502                  "kind": {
  1503                   "request": {}
  1504                  },
  1505                  "metadata_key": {
  1506                   "key": "envoy.filters.http.rbac",
  1507                   "path": [
  1508                    {
  1509                     "key": "istio_dry_run_allow_shadow_engine_result"
  1510                    }
  1511                   ]
  1512                  }
  1513                 }
  1514                },
  1515                {
  1516                 "tag": "istio.authorization.dry_run.deny_policy.name",
  1517                 "metadata": {
  1518                  "kind": {
  1519                   "request": {}
  1520                  },
  1521                  "metadata_key": {
  1522                   "key": "envoy.filters.http.rbac",
  1523                   "path": [
  1524                    {
  1525                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  1526                    }
  1527                   ]
  1528                  }
  1529                 }
  1530                },
  1531                {
  1532                 "tag": "istio.authorization.dry_run.deny_policy.result",
  1533                 "metadata": {
  1534                  "kind": {
  1535                   "request": {}
  1536                  },
  1537                  "metadata_key": {
  1538                   "key": "envoy.filters.http.rbac",
  1539                   "path": [
  1540                    {
  1541                     "key": "istio_dry_run_deny_shadow_engine_result"
  1542                    }
  1543                   ]
  1544                  }
  1545                 }
  1546                },
  1547                {
  1548                 "tag": "istio.canonical_revision",
  1549                 "literal": {
  1550                  "value": "v1"
  1551                 }
  1552                },
  1553                {
  1554                 "tag": "istio.canonical_service",
  1555                 "literal": {
  1556                  "value": "httpbin"
  1557                 }
  1558                },
  1559                {
  1560                 "tag": "istio.mesh_id",
  1561                 "literal": {
  1562                  "value": "cluster.local"
  1563                 }
  1564                },
  1565                {
  1566                 "tag": "istio.namespace",
  1567                 "literal": {
  1568                  "value": "default"
  1569                 }
  1570                }
  1571               ]
  1572              },
  1573              "use_remote_address": false,
  1574              "upgrade_configs": [
  1575               {
  1576                "upgrade_type": "websocket"
  1577               }
  1578              ],
  1579              "stream_idle_timeout": "0s",
  1580              "normalize_path": true,
  1581              "request_id_extension": {
  1582               "typed_config": {
  1583                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  1584                "use_request_id_for_trace_sampling": true
  1585               }
  1586              },
  1587              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  1588             }
  1589            }
  1590           ]
  1591          }
  1592         ],
  1593         "listener_filters": [
  1594          {
  1595           "name": "envoy.filters.listener.tls_inspector",
  1596           "typed_config": {
  1597            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  1598           }
  1599          },
  1600          {
  1601           "name": "envoy.filters.listener.http_inspector",
  1602           "typed_config": {
  1603            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  1604           }
  1605          }
  1606         ],
  1607         "listener_filters_timeout": "0s",
  1608         "traffic_direction": "OUTBOUND",
  1609         "continue_on_listener_filters_timeout": true,
  1610         "default_filter_chain": {
  1611          "filters": [
  1612           {
  1613            "name": "istio.stats",
  1614            "typed_config": {
  1615             "@type": "type.googleapis.com/stats.PluginConfig"
  1616            }
  1617           },
  1618           {
  1619            "name": "envoy.filters.network.tcp_proxy",
  1620            "typed_config": {
  1621             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  1622             "stat_prefix": "outbound|15008||reviews-istio-waypoint.ambient.svc.cluster.local",
  1623             "cluster": "outbound|15008||reviews-istio-waypoint.ambient.svc.cluster.local"
  1624            }
  1625           }
  1626          ]
  1627         },
  1628         "bind_to_port": false
  1629        },
  1630        "last_updated": "2023-06-20T09:07:41.959Z"
  1631       }
  1632      },
  1633      {
  1634       "name": "10.96.0.10_9153",
  1635       "active_state": {
  1636        "version_info": "2023-06-20T09:07:41Z/3",
  1637        "listener": {
  1638         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  1639         "name": "10.96.0.10_9153",
  1640         "address": {
  1641          "socket_address": {
  1642           "address": "10.96.0.10",
  1643           "port_value": 9153
  1644          }
  1645         },
  1646         "filter_chains": [
  1647          {
  1648           "filter_chain_match": {
  1649            "transport_protocol": "raw_buffer",
  1650            "application_protocols": [
  1651             "http/1.1",
  1652             "h2c"
  1653            ]
  1654           },
  1655           "filters": [
  1656            {
  1657             "name": "envoy.filters.network.http_connection_manager",
  1658             "typed_config": {
  1659              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  1660              "stat_prefix": "outbound_10.96.0.10_9153",
  1661              "rds": {
  1662               "config_source": {
  1663                "ads": {},
  1664                "initial_fetch_timeout": "0s",
  1665                "resource_api_version": "V3"
  1666               },
  1667               "route_config_name": "kube-dns.kube-system.svc.cluster.local:9153"
  1668              },
  1669              "http_filters": [
  1670               {
  1671                "name": "istio.metadata_exchange",
  1672                "typed_config": {
  1673                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  1674                 "config": {
  1675                  "vm_config": {
  1676                   "runtime": "envoy.wasm.runtime.null",
  1677                   "code": {
  1678                    "local": {
  1679                     "inline_string": "envoy.wasm.metadata_exchange"
  1680                    }
  1681                   }
  1682                  },
  1683                  "configuration": {
  1684                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  1685                  }
  1686                 }
  1687                }
  1688               },
  1689               {
  1690                "name": "envoy.filters.http.grpc_stats",
  1691                "typed_config": {
  1692                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  1693                 "emit_filter_state": true,
  1694                 "stats_for_all_methods": false
  1695                }
  1696               },
  1697               {
  1698                "name": "istio.alpn",
  1699                "typed_config": {
  1700                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  1701                 "alpn_override": [
  1702                  {
  1703                   "alpn_override": [
  1704                    "istio-http/1.0",
  1705                    "istio",
  1706                    "http/1.0"
  1707                   ]
  1708                  },
  1709                  {
  1710                   "upstream_protocol": "HTTP11",
  1711                   "alpn_override": [
  1712                    "istio-http/1.1",
  1713                    "istio",
  1714                    "http/1.1"
  1715                   ]
  1716                  },
  1717                  {
  1718                   "upstream_protocol": "HTTP2",
  1719                   "alpn_override": [
  1720                    "istio-h2",
  1721                    "istio",
  1722                    "h2"
  1723                   ]
  1724                  }
  1725                 ]
  1726                }
  1727               },
  1728               {
  1729                "name": "envoy.filters.http.fault",
  1730                "typed_config": {
  1731                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  1732                }
  1733               },
  1734               {
  1735                "name": "envoy.filters.http.cors",
  1736                "typed_config": {
  1737                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  1738                }
  1739               },
  1740               {
  1741                "name": "istio.stats",
  1742                "typed_config": {
  1743                 "@type": "type.googleapis.com/stats.PluginConfig"
  1744                }
  1745               },
  1746               {
  1747                "name": "envoy.filters.http.router",
  1748                "typed_config": {
  1749                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  1750                }
  1751               }
  1752              ],
  1753              "tracing": {
  1754               "client_sampling": {
  1755                "value": 100
  1756               },
  1757               "random_sampling": {
  1758                "value": 1
  1759               },
  1760               "overall_sampling": {
  1761                "value": 100
  1762               },
  1763               "custom_tags": [
  1764                {
  1765                 "tag": "istio.authorization.dry_run.allow_policy.name",
  1766                 "metadata": {
  1767                  "kind": {
  1768                   "request": {}
  1769                  },
  1770                  "metadata_key": {
  1771                   "key": "envoy.filters.http.rbac",
  1772                   "path": [
  1773                    {
  1774                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  1775                    }
  1776                   ]
  1777                  }
  1778                 }
  1779                },
  1780                {
  1781                 "tag": "istio.authorization.dry_run.allow_policy.result",
  1782                 "metadata": {
  1783                  "kind": {
  1784                   "request": {}
  1785                  },
  1786                  "metadata_key": {
  1787                   "key": "envoy.filters.http.rbac",
  1788                   "path": [
  1789                    {
  1790                     "key": "istio_dry_run_allow_shadow_engine_result"
  1791                    }
  1792                   ]
  1793                  }
  1794                 }
  1795                },
  1796                {
  1797                 "tag": "istio.authorization.dry_run.deny_policy.name",
  1798                 "metadata": {
  1799                  "kind": {
  1800                   "request": {}
  1801                  },
  1802                  "metadata_key": {
  1803                   "key": "envoy.filters.http.rbac",
  1804                   "path": [
  1805                    {
  1806                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  1807                    }
  1808                   ]
  1809                  }
  1810                 }
  1811                },
  1812                {
  1813                 "tag": "istio.authorization.dry_run.deny_policy.result",
  1814                 "metadata": {
  1815                  "kind": {
  1816                   "request": {}
  1817                  },
  1818                  "metadata_key": {
  1819                   "key": "envoy.filters.http.rbac",
  1820                   "path": [
  1821                    {
  1822                     "key": "istio_dry_run_deny_shadow_engine_result"
  1823                    }
  1824                   ]
  1825                  }
  1826                 }
  1827                },
  1828                {
  1829                 "tag": "istio.canonical_revision",
  1830                 "literal": {
  1831                  "value": "v1"
  1832                 }
  1833                },
  1834                {
  1835                 "tag": "istio.canonical_service",
  1836                 "literal": {
  1837                  "value": "httpbin"
  1838                 }
  1839                },
  1840                {
  1841                 "tag": "istio.mesh_id",
  1842                 "literal": {
  1843                  "value": "cluster.local"
  1844                 }
  1845                },
  1846                {
  1847                 "tag": "istio.namespace",
  1848                 "literal": {
  1849                  "value": "default"
  1850                 }
  1851                }
  1852               ]
  1853              },
  1854              "use_remote_address": false,
  1855              "upgrade_configs": [
  1856               {
  1857                "upgrade_type": "websocket"
  1858               }
  1859              ],
  1860              "stream_idle_timeout": "0s",
  1861              "normalize_path": true,
  1862              "request_id_extension": {
  1863               "typed_config": {
  1864                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  1865                "use_request_id_for_trace_sampling": true
  1866               }
  1867              },
  1868              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  1869             }
  1870            }
  1871           ]
  1872          }
  1873         ],
  1874         "listener_filters": [
  1875          {
  1876           "name": "envoy.filters.listener.tls_inspector",
  1877           "typed_config": {
  1878            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  1879           }
  1880          },
  1881          {
  1882           "name": "envoy.filters.listener.http_inspector",
  1883           "typed_config": {
  1884            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  1885           }
  1886          }
  1887         ],
  1888         "listener_filters_timeout": "0s",
  1889         "traffic_direction": "OUTBOUND",
  1890         "continue_on_listener_filters_timeout": true,
  1891         "default_filter_chain": {
  1892          "filters": [
  1893           {
  1894            "name": "istio.stats",
  1895            "typed_config": {
  1896             "@type": "type.googleapis.com/stats.PluginConfig"
  1897            }
  1898           },
  1899           {
  1900            "name": "envoy.filters.network.tcp_proxy",
  1901            "typed_config": {
  1902             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  1903             "stat_prefix": "outbound|9153||kube-dns.kube-system.svc.cluster.local",
  1904             "cluster": "outbound|9153||kube-dns.kube-system.svc.cluster.local"
  1905            }
  1906           }
  1907          ]
  1908         },
  1909         "bind_to_port": false
  1910        },
  1911        "last_updated": "2023-06-20T09:07:41.981Z"
  1912       }
  1913      },
  1914      {
  1915       "name": "10.100.228.83_15008",
  1916       "active_state": {
  1917        "version_info": "2023-06-20T09:07:41Z/3",
  1918        "listener": {
  1919         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  1920         "name": "10.100.228.83_15008",
  1921         "address": {
  1922          "socket_address": {
  1923           "address": "10.100.228.83",
  1924           "port_value": 15008
  1925          }
  1926         },
  1927         "filter_chains": [
  1928          {
  1929           "filter_chain_match": {
  1930            "transport_protocol": "raw_buffer",
  1931            "application_protocols": [
  1932             "http/1.1",
  1933             "h2c"
  1934            ]
  1935           },
  1936           "filters": [
  1937            {
  1938             "name": "envoy.filters.network.http_connection_manager",
  1939             "typed_config": {
  1940              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  1941              "stat_prefix": "outbound_10.100.228.83_15008",
  1942              "rds": {
  1943               "config_source": {
  1944                "ads": {},
  1945                "initial_fetch_timeout": "0s",
  1946                "resource_api_version": "V3"
  1947               },
  1948               "route_config_name": "productpage-istio-waypoint.ambient.svc.cluster.local:15008"
  1949              },
  1950              "http_filters": [
  1951               {
  1952                "name": "istio.metadata_exchange",
  1953                "typed_config": {
  1954                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  1955                 "config": {
  1956                  "vm_config": {
  1957                   "runtime": "envoy.wasm.runtime.null",
  1958                   "code": {
  1959                    "local": {
  1960                     "inline_string": "envoy.wasm.metadata_exchange"
  1961                    }
  1962                   }
  1963                  },
  1964                  "configuration": {
  1965                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  1966                  }
  1967                 }
  1968                }
  1969               },
  1970               {
  1971                "name": "envoy.filters.http.grpc_stats",
  1972                "typed_config": {
  1973                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  1974                 "emit_filter_state": true,
  1975                 "stats_for_all_methods": false
  1976                }
  1977               },
  1978               {
  1979                "name": "istio.alpn",
  1980                "typed_config": {
  1981                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  1982                 "alpn_override": [
  1983                  {
  1984                   "alpn_override": [
  1985                    "istio-http/1.0",
  1986                    "istio",
  1987                    "http/1.0"
  1988                   ]
  1989                  },
  1990                  {
  1991                   "upstream_protocol": "HTTP11",
  1992                   "alpn_override": [
  1993                    "istio-http/1.1",
  1994                    "istio",
  1995                    "http/1.1"
  1996                   ]
  1997                  },
  1998                  {
  1999                   "upstream_protocol": "HTTP2",
  2000                   "alpn_override": [
  2001                    "istio-h2",
  2002                    "istio",
  2003                    "h2"
  2004                   ]
  2005                  }
  2006                 ]
  2007                }
  2008               },
  2009               {
  2010                "name": "envoy.filters.http.fault",
  2011                "typed_config": {
  2012                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  2013                }
  2014               },
  2015               {
  2016                "name": "envoy.filters.http.cors",
  2017                "typed_config": {
  2018                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  2019                }
  2020               },
  2021               {
  2022                "name": "istio.stats",
  2023                "typed_config": {
  2024                 "@type": "type.googleapis.com/stats.PluginConfig"
  2025                }
  2026               },
  2027               {
  2028                "name": "envoy.filters.http.router",
  2029                "typed_config": {
  2030                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  2031                }
  2032               }
  2033              ],
  2034              "tracing": {
  2035               "client_sampling": {
  2036                "value": 100
  2037               },
  2038               "random_sampling": {
  2039                "value": 1
  2040               },
  2041               "overall_sampling": {
  2042                "value": 100
  2043               },
  2044               "custom_tags": [
  2045                {
  2046                 "tag": "istio.authorization.dry_run.allow_policy.name",
  2047                 "metadata": {
  2048                  "kind": {
  2049                   "request": {}
  2050                  },
  2051                  "metadata_key": {
  2052                   "key": "envoy.filters.http.rbac",
  2053                   "path": [
  2054                    {
  2055                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  2056                    }
  2057                   ]
  2058                  }
  2059                 }
  2060                },
  2061                {
  2062                 "tag": "istio.authorization.dry_run.allow_policy.result",
  2063                 "metadata": {
  2064                  "kind": {
  2065                   "request": {}
  2066                  },
  2067                  "metadata_key": {
  2068                   "key": "envoy.filters.http.rbac",
  2069                   "path": [
  2070                    {
  2071                     "key": "istio_dry_run_allow_shadow_engine_result"
  2072                    }
  2073                   ]
  2074                  }
  2075                 }
  2076                },
  2077                {
  2078                 "tag": "istio.authorization.dry_run.deny_policy.name",
  2079                 "metadata": {
  2080                  "kind": {
  2081                   "request": {}
  2082                  },
  2083                  "metadata_key": {
  2084                   "key": "envoy.filters.http.rbac",
  2085                   "path": [
  2086                    {
  2087                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  2088                    }
  2089                   ]
  2090                  }
  2091                 }
  2092                },
  2093                {
  2094                 "tag": "istio.authorization.dry_run.deny_policy.result",
  2095                 "metadata": {
  2096                  "kind": {
  2097                   "request": {}
  2098                  },
  2099                  "metadata_key": {
  2100                   "key": "envoy.filters.http.rbac",
  2101                   "path": [
  2102                    {
  2103                     "key": "istio_dry_run_deny_shadow_engine_result"
  2104                    }
  2105                   ]
  2106                  }
  2107                 }
  2108                },
  2109                {
  2110                 "tag": "istio.canonical_revision",
  2111                 "literal": {
  2112                  "value": "v1"
  2113                 }
  2114                },
  2115                {
  2116                 "tag": "istio.canonical_service",
  2117                 "literal": {
  2118                  "value": "httpbin"
  2119                 }
  2120                },
  2121                {
  2122                 "tag": "istio.mesh_id",
  2123                 "literal": {
  2124                  "value": "cluster.local"
  2125                 }
  2126                },
  2127                {
  2128                 "tag": "istio.namespace",
  2129                 "literal": {
  2130                  "value": "default"
  2131                 }
  2132                }
  2133               ]
  2134              },
  2135              "use_remote_address": false,
  2136              "upgrade_configs": [
  2137               {
  2138                "upgrade_type": "websocket"
  2139               }
  2140              ],
  2141              "stream_idle_timeout": "0s",
  2142              "normalize_path": true,
  2143              "request_id_extension": {
  2144               "typed_config": {
  2145                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  2146                "use_request_id_for_trace_sampling": true
  2147               }
  2148              },
  2149              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  2150             }
  2151            }
  2152           ]
  2153          }
  2154         ],
  2155         "listener_filters": [
  2156          {
  2157           "name": "envoy.filters.listener.tls_inspector",
  2158           "typed_config": {
  2159            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  2160           }
  2161          },
  2162          {
  2163           "name": "envoy.filters.listener.http_inspector",
  2164           "typed_config": {
  2165            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  2166           }
  2167          }
  2168         ],
  2169         "listener_filters_timeout": "0s",
  2170         "traffic_direction": "OUTBOUND",
  2171         "continue_on_listener_filters_timeout": true,
  2172         "default_filter_chain": {
  2173          "filters": [
  2174           {
  2175            "name": "istio.stats",
  2176            "typed_config": {
  2177             "@type": "type.googleapis.com/stats.PluginConfig"
  2178            }
  2179           },
  2180           {
  2181            "name": "envoy.filters.network.tcp_proxy",
  2182            "typed_config": {
  2183             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  2184             "stat_prefix": "outbound|15008||productpage-istio-waypoint.ambient.svc.cluster.local",
  2185             "cluster": "outbound|15008||productpage-istio-waypoint.ambient.svc.cluster.local"
  2186            }
  2187           }
  2188          ]
  2189         },
  2190         "bind_to_port": false
  2191        },
  2192        "last_updated": "2023-06-20T09:07:41.983Z"
  2193       }
  2194      },
  2195      {
  2196       "name": "0.0.0.0_15014",
  2197       "active_state": {
  2198        "version_info": "2023-06-20T09:07:41Z/3",
  2199        "listener": {
  2200         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  2201         "name": "0.0.0.0_15014",
  2202         "address": {
  2203          "socket_address": {
  2204           "address": "0.0.0.0",
  2205           "port_value": 15014
  2206          }
  2207         },
  2208         "filter_chains": [
  2209          {
  2210           "filter_chain_match": {
  2211            "transport_protocol": "raw_buffer",
  2212            "application_protocols": [
  2213             "http/1.1",
  2214             "h2c"
  2215            ]
  2216           },
  2217           "filters": [
  2218            {
  2219             "name": "envoy.filters.network.http_connection_manager",
  2220             "typed_config": {
  2221              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  2222              "stat_prefix": "outbound_0.0.0.0_15014",
  2223              "rds": {
  2224               "config_source": {
  2225                "ads": {},
  2226                "initial_fetch_timeout": "0s",
  2227                "resource_api_version": "V3"
  2228               },
  2229               "route_config_name": "15014"
  2230              },
  2231              "http_filters": [
  2232               {
  2233                "name": "istio.metadata_exchange",
  2234                "typed_config": {
  2235                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  2236                 "config": {
  2237                  "vm_config": {
  2238                   "runtime": "envoy.wasm.runtime.null",
  2239                   "code": {
  2240                    "local": {
  2241                     "inline_string": "envoy.wasm.metadata_exchange"
  2242                    }
  2243                   }
  2244                  },
  2245                  "configuration": {
  2246                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  2247                  }
  2248                 }
  2249                }
  2250               },
  2251               {
  2252                "name": "envoy.filters.http.grpc_stats",
  2253                "typed_config": {
  2254                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  2255                 "emit_filter_state": true,
  2256                 "stats_for_all_methods": false
  2257                }
  2258               },
  2259               {
  2260                "name": "istio.alpn",
  2261                "typed_config": {
  2262                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  2263                 "alpn_override": [
  2264                  {
  2265                   "alpn_override": [
  2266                    "istio-http/1.0",
  2267                    "istio",
  2268                    "http/1.0"
  2269                   ]
  2270                  },
  2271                  {
  2272                   "upstream_protocol": "HTTP11",
  2273                   "alpn_override": [
  2274                    "istio-http/1.1",
  2275                    "istio",
  2276                    "http/1.1"
  2277                   ]
  2278                  },
  2279                  {
  2280                   "upstream_protocol": "HTTP2",
  2281                   "alpn_override": [
  2282                    "istio-h2",
  2283                    "istio",
  2284                    "h2"
  2285                   ]
  2286                  }
  2287                 ]
  2288                }
  2289               },
  2290               {
  2291                "name": "envoy.filters.http.fault",
  2292                "typed_config": {
  2293                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  2294                }
  2295               },
  2296               {
  2297                "name": "envoy.filters.http.cors",
  2298                "typed_config": {
  2299                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  2300                }
  2301               },
  2302               {
  2303                "name": "istio.stats",
  2304                "typed_config": {
  2305                 "@type": "type.googleapis.com/stats.PluginConfig"
  2306                }
  2307               },
  2308               {
  2309                "name": "envoy.filters.http.router",
  2310                "typed_config": {
  2311                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  2312                }
  2313               }
  2314              ],
  2315              "tracing": {
  2316               "client_sampling": {
  2317                "value": 100
  2318               },
  2319               "random_sampling": {
  2320                "value": 1
  2321               },
  2322               "overall_sampling": {
  2323                "value": 100
  2324               },
  2325               "custom_tags": [
  2326                {
  2327                 "tag": "istio.authorization.dry_run.allow_policy.name",
  2328                 "metadata": {
  2329                  "kind": {
  2330                   "request": {}
  2331                  },
  2332                  "metadata_key": {
  2333                   "key": "envoy.filters.http.rbac",
  2334                   "path": [
  2335                    {
  2336                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  2337                    }
  2338                   ]
  2339                  }
  2340                 }
  2341                },
  2342                {
  2343                 "tag": "istio.authorization.dry_run.allow_policy.result",
  2344                 "metadata": {
  2345                  "kind": {
  2346                   "request": {}
  2347                  },
  2348                  "metadata_key": {
  2349                   "key": "envoy.filters.http.rbac",
  2350                   "path": [
  2351                    {
  2352                     "key": "istio_dry_run_allow_shadow_engine_result"
  2353                    }
  2354                   ]
  2355                  }
  2356                 }
  2357                },
  2358                {
  2359                 "tag": "istio.authorization.dry_run.deny_policy.name",
  2360                 "metadata": {
  2361                  "kind": {
  2362                   "request": {}
  2363                  },
  2364                  "metadata_key": {
  2365                   "key": "envoy.filters.http.rbac",
  2366                   "path": [
  2367                    {
  2368                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  2369                    }
  2370                   ]
  2371                  }
  2372                 }
  2373                },
  2374                {
  2375                 "tag": "istio.authorization.dry_run.deny_policy.result",
  2376                 "metadata": {
  2377                  "kind": {
  2378                   "request": {}
  2379                  },
  2380                  "metadata_key": {
  2381                   "key": "envoy.filters.http.rbac",
  2382                   "path": [
  2383                    {
  2384                     "key": "istio_dry_run_deny_shadow_engine_result"
  2385                    }
  2386                   ]
  2387                  }
  2388                 }
  2389                },
  2390                {
  2391                 "tag": "istio.canonical_revision",
  2392                 "literal": {
  2393                  "value": "v1"
  2394                 }
  2395                },
  2396                {
  2397                 "tag": "istio.canonical_service",
  2398                 "literal": {
  2399                  "value": "httpbin"
  2400                 }
  2401                },
  2402                {
  2403                 "tag": "istio.mesh_id",
  2404                 "literal": {
  2405                  "value": "cluster.local"
  2406                 }
  2407                },
  2408                {
  2409                 "tag": "istio.namespace",
  2410                 "literal": {
  2411                  "value": "default"
  2412                 }
  2413                }
  2414               ]
  2415              },
  2416              "use_remote_address": false,
  2417              "upgrade_configs": [
  2418               {
  2419                "upgrade_type": "websocket"
  2420               }
  2421              ],
  2422              "stream_idle_timeout": "0s",
  2423              "normalize_path": true,
  2424              "request_id_extension": {
  2425               "typed_config": {
  2426                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  2427                "use_request_id_for_trace_sampling": true
  2428               }
  2429              },
  2430              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  2431             }
  2432            }
  2433           ]
  2434          }
  2435         ],
  2436         "listener_filters": [
  2437          {
  2438           "name": "envoy.filters.listener.tls_inspector",
  2439           "typed_config": {
  2440            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  2441           }
  2442          },
  2443          {
  2444           "name": "envoy.filters.listener.http_inspector",
  2445           "typed_config": {
  2446            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  2447           }
  2448          }
  2449         ],
  2450         "listener_filters_timeout": "0s",
  2451         "traffic_direction": "OUTBOUND",
  2452         "continue_on_listener_filters_timeout": true,
  2453         "default_filter_chain": {
  2454          "filter_chain_match": {},
  2455          "filters": [
  2456           {
  2457            "name": "istio.stats",
  2458            "typed_config": {
  2459             "@type": "type.googleapis.com/stats.PluginConfig"
  2460            }
  2461           },
  2462           {
  2463            "name": "envoy.filters.network.tcp_proxy",
  2464            "typed_config": {
  2465             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  2466             "stat_prefix": "PassthroughCluster",
  2467             "cluster": "PassthroughCluster"
  2468            }
  2469           }
  2470          ],
  2471          "name": "PassthroughFilterChain"
  2472         },
  2473         "bind_to_port": false
  2474        },
  2475        "last_updated": "2023-06-20T09:07:41.984Z"
  2476       }
  2477      },
  2478      {
  2479       "name": "0.0.0.0_8000",
  2480       "active_state": {
  2481        "version_info": "2023-06-20T09:07:41Z/3",
  2482        "listener": {
  2483         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  2484         "name": "0.0.0.0_8000",
  2485         "address": {
  2486          "socket_address": {
  2487           "address": "0.0.0.0",
  2488           "port_value": 8000
  2489          }
  2490         },
  2491         "filter_chains": [
  2492          {
  2493           "filter_chain_match": {
  2494            "transport_protocol": "raw_buffer",
  2495            "application_protocols": [
  2496             "http/1.1",
  2497             "h2c"
  2498            ]
  2499           },
  2500           "filters": [
  2501            {
  2502             "name": "envoy.filters.network.http_connection_manager",
  2503             "typed_config": {
  2504              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  2505              "stat_prefix": "outbound_0.0.0.0_8000",
  2506              "rds": {
  2507               "config_source": {
  2508                "ads": {},
  2509                "initial_fetch_timeout": "0s",
  2510                "resource_api_version": "V3"
  2511               },
  2512               "route_config_name": "8000"
  2513              },
  2514              "http_filters": [
  2515               {
  2516                "name": "istio.metadata_exchange",
  2517                "typed_config": {
  2518                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  2519                 "config": {
  2520                  "vm_config": {
  2521                   "runtime": "envoy.wasm.runtime.null",
  2522                   "code": {
  2523                    "local": {
  2524                     "inline_string": "envoy.wasm.metadata_exchange"
  2525                    }
  2526                   }
  2527                  },
  2528                  "configuration": {
  2529                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  2530                  }
  2531                 }
  2532                }
  2533               },
  2534               {
  2535                "name": "envoy.filters.http.grpc_stats",
  2536                "typed_config": {
  2537                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  2538                 "emit_filter_state": true,
  2539                 "stats_for_all_methods": false
  2540                }
  2541               },
  2542               {
  2543                "name": "istio.alpn",
  2544                "typed_config": {
  2545                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  2546                 "alpn_override": [
  2547                  {
  2548                   "alpn_override": [
  2549                    "istio-http/1.0",
  2550                    "istio",
  2551                    "http/1.0"
  2552                   ]
  2553                  },
  2554                  {
  2555                   "upstream_protocol": "HTTP11",
  2556                   "alpn_override": [
  2557                    "istio-http/1.1",
  2558                    "istio",
  2559                    "http/1.1"
  2560                   ]
  2561                  },
  2562                  {
  2563                   "upstream_protocol": "HTTP2",
  2564                   "alpn_override": [
  2565                    "istio-h2",
  2566                    "istio",
  2567                    "h2"
  2568                   ]
  2569                  }
  2570                 ]
  2571                }
  2572               },
  2573               {
  2574                "name": "envoy.filters.http.fault",
  2575                "typed_config": {
  2576                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  2577                }
  2578               },
  2579               {
  2580                "name": "envoy.filters.http.cors",
  2581                "typed_config": {
  2582                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  2583                }
  2584               },
  2585               {
  2586                "name": "istio.stats",
  2587                "typed_config": {
  2588                 "@type": "type.googleapis.com/stats.PluginConfig"
  2589                }
  2590               },
  2591               {
  2592                "name": "envoy.filters.http.router",
  2593                "typed_config": {
  2594                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  2595                }
  2596               }
  2597              ],
  2598              "tracing": {
  2599               "client_sampling": {
  2600                "value": 100
  2601               },
  2602               "random_sampling": {
  2603                "value": 1
  2604               },
  2605               "overall_sampling": {
  2606                "value": 100
  2607               },
  2608               "custom_tags": [
  2609                {
  2610                 "tag": "istio.authorization.dry_run.allow_policy.name",
  2611                 "metadata": {
  2612                  "kind": {
  2613                   "request": {}
  2614                  },
  2615                  "metadata_key": {
  2616                   "key": "envoy.filters.http.rbac",
  2617                   "path": [
  2618                    {
  2619                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  2620                    }
  2621                   ]
  2622                  }
  2623                 }
  2624                },
  2625                {
  2626                 "tag": "istio.authorization.dry_run.allow_policy.result",
  2627                 "metadata": {
  2628                  "kind": {
  2629                   "request": {}
  2630                  },
  2631                  "metadata_key": {
  2632                   "key": "envoy.filters.http.rbac",
  2633                   "path": [
  2634                    {
  2635                     "key": "istio_dry_run_allow_shadow_engine_result"
  2636                    }
  2637                   ]
  2638                  }
  2639                 }
  2640                },
  2641                {
  2642                 "tag": "istio.authorization.dry_run.deny_policy.name",
  2643                 "metadata": {
  2644                  "kind": {
  2645                   "request": {}
  2646                  },
  2647                  "metadata_key": {
  2648                   "key": "envoy.filters.http.rbac",
  2649                   "path": [
  2650                    {
  2651                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  2652                    }
  2653                   ]
  2654                  }
  2655                 }
  2656                },
  2657                {
  2658                 "tag": "istio.authorization.dry_run.deny_policy.result",
  2659                 "metadata": {
  2660                  "kind": {
  2661                   "request": {}
  2662                  },
  2663                  "metadata_key": {
  2664                   "key": "envoy.filters.http.rbac",
  2665                   "path": [
  2666                    {
  2667                     "key": "istio_dry_run_deny_shadow_engine_result"
  2668                    }
  2669                   ]
  2670                  }
  2671                 }
  2672                },
  2673                {
  2674                 "tag": "istio.canonical_revision",
  2675                 "literal": {
  2676                  "value": "v1"
  2677                 }
  2678                },
  2679                {
  2680                 "tag": "istio.canonical_service",
  2681                 "literal": {
  2682                  "value": "httpbin"
  2683                 }
  2684                },
  2685                {
  2686                 "tag": "istio.mesh_id",
  2687                 "literal": {
  2688                  "value": "cluster.local"
  2689                 }
  2690                },
  2691                {
  2692                 "tag": "istio.namespace",
  2693                 "literal": {
  2694                  "value": "default"
  2695                 }
  2696                }
  2697               ]
  2698              },
  2699              "use_remote_address": false,
  2700              "upgrade_configs": [
  2701               {
  2702                "upgrade_type": "websocket"
  2703               }
  2704              ],
  2705              "stream_idle_timeout": "0s",
  2706              "normalize_path": true,
  2707              "request_id_extension": {
  2708               "typed_config": {
  2709                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  2710                "use_request_id_for_trace_sampling": true
  2711               }
  2712              },
  2713              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  2714             }
  2715            }
  2716           ]
  2717          }
  2718         ],
  2719         "listener_filters": [
  2720          {
  2721           "name": "envoy.filters.listener.tls_inspector",
  2722           "typed_config": {
  2723            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  2724           }
  2725          },
  2726          {
  2727           "name": "envoy.filters.listener.http_inspector",
  2728           "typed_config": {
  2729            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  2730           }
  2731          }
  2732         ],
  2733         "listener_filters_timeout": "0s",
  2734         "traffic_direction": "OUTBOUND",
  2735         "continue_on_listener_filters_timeout": true,
  2736         "default_filter_chain": {
  2737          "filter_chain_match": {},
  2738          "filters": [
  2739           {
  2740            "name": "istio.stats",
  2741            "typed_config": {
  2742             "@type": "type.googleapis.com/stats.PluginConfig"
  2743            }
  2744           },
  2745           {
  2746            "name": "envoy.filters.network.tcp_proxy",
  2747            "typed_config": {
  2748             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  2749             "stat_prefix": "PassthroughCluster",
  2750             "cluster": "PassthroughCluster"
  2751            }
  2752           }
  2753          ],
  2754          "name": "PassthroughFilterChain"
  2755         },
  2756         "bind_to_port": false
  2757        },
  2758        "last_updated": "2023-06-20T09:07:41.984Z"
  2759       }
  2760      },
  2761      {
  2762       "name": "0.0.0.0_15010",
  2763       "active_state": {
  2764        "version_info": "2023-06-20T09:07:41Z/3",
  2765        "listener": {
  2766         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  2767         "name": "0.0.0.0_15010",
  2768         "address": {
  2769          "socket_address": {
  2770           "address": "0.0.0.0",
  2771           "port_value": 15010
  2772          }
  2773         },
  2774         "filter_chains": [
  2775          {
  2776           "filter_chain_match": {
  2777            "transport_protocol": "raw_buffer",
  2778            "application_protocols": [
  2779             "http/1.1",
  2780             "h2c"
  2781            ]
  2782           },
  2783           "filters": [
  2784            {
  2785             "name": "envoy.filters.network.http_connection_manager",
  2786             "typed_config": {
  2787              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  2788              "stat_prefix": "outbound_0.0.0.0_15010",
  2789              "rds": {
  2790               "config_source": {
  2791                "ads": {},
  2792                "initial_fetch_timeout": "0s",
  2793                "resource_api_version": "V3"
  2794               },
  2795               "route_config_name": "15010"
  2796              },
  2797              "http_filters": [
  2798               {
  2799                "name": "istio.metadata_exchange",
  2800                "typed_config": {
  2801                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  2802                 "config": {
  2803                  "vm_config": {
  2804                   "runtime": "envoy.wasm.runtime.null",
  2805                   "code": {
  2806                    "local": {
  2807                     "inline_string": "envoy.wasm.metadata_exchange"
  2808                    }
  2809                   }
  2810                  },
  2811                  "configuration": {
  2812                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  2813                  }
  2814                 }
  2815                }
  2816               },
  2817               {
  2818                "name": "envoy.filters.http.grpc_stats",
  2819                "typed_config": {
  2820                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  2821                 "emit_filter_state": true,
  2822                 "stats_for_all_methods": false
  2823                }
  2824               },
  2825               {
  2826                "name": "istio.alpn",
  2827                "typed_config": {
  2828                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  2829                 "alpn_override": [
  2830                  {
  2831                   "alpn_override": [
  2832                    "istio-http/1.0",
  2833                    "istio",
  2834                    "http/1.0"
  2835                   ]
  2836                  },
  2837                  {
  2838                   "upstream_protocol": "HTTP11",
  2839                   "alpn_override": [
  2840                    "istio-http/1.1",
  2841                    "istio",
  2842                    "http/1.1"
  2843                   ]
  2844                  },
  2845                  {
  2846                   "upstream_protocol": "HTTP2",
  2847                   "alpn_override": [
  2848                    "istio-h2",
  2849                    "istio",
  2850                    "h2"
  2851                   ]
  2852                  }
  2853                 ]
  2854                }
  2855               },
  2856               {
  2857                "name": "envoy.filters.http.fault",
  2858                "typed_config": {
  2859                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  2860                }
  2861               },
  2862               {
  2863                "name": "envoy.filters.http.cors",
  2864                "typed_config": {
  2865                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  2866                }
  2867               },
  2868               {
  2869                "name": "istio.stats",
  2870                "typed_config": {
  2871                 "@type": "type.googleapis.com/stats.PluginConfig"
  2872                }
  2873               },
  2874               {
  2875                "name": "envoy.filters.http.router",
  2876                "typed_config": {
  2877                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  2878                }
  2879               }
  2880              ],
  2881              "tracing": {
  2882               "client_sampling": {
  2883                "value": 100
  2884               },
  2885               "random_sampling": {
  2886                "value": 1
  2887               },
  2888               "overall_sampling": {
  2889                "value": 100
  2890               },
  2891               "custom_tags": [
  2892                {
  2893                 "tag": "istio.authorization.dry_run.allow_policy.name",
  2894                 "metadata": {
  2895                  "kind": {
  2896                   "request": {}
  2897                  },
  2898                  "metadata_key": {
  2899                   "key": "envoy.filters.http.rbac",
  2900                   "path": [
  2901                    {
  2902                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  2903                    }
  2904                   ]
  2905                  }
  2906                 }
  2907                },
  2908                {
  2909                 "tag": "istio.authorization.dry_run.allow_policy.result",
  2910                 "metadata": {
  2911                  "kind": {
  2912                   "request": {}
  2913                  },
  2914                  "metadata_key": {
  2915                   "key": "envoy.filters.http.rbac",
  2916                   "path": [
  2917                    {
  2918                     "key": "istio_dry_run_allow_shadow_engine_result"
  2919                    }
  2920                   ]
  2921                  }
  2922                 }
  2923                },
  2924                {
  2925                 "tag": "istio.authorization.dry_run.deny_policy.name",
  2926                 "metadata": {
  2927                  "kind": {
  2928                   "request": {}
  2929                  },
  2930                  "metadata_key": {
  2931                   "key": "envoy.filters.http.rbac",
  2932                   "path": [
  2933                    {
  2934                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  2935                    }
  2936                   ]
  2937                  }
  2938                 }
  2939                },
  2940                {
  2941                 "tag": "istio.authorization.dry_run.deny_policy.result",
  2942                 "metadata": {
  2943                  "kind": {
  2944                   "request": {}
  2945                  },
  2946                  "metadata_key": {
  2947                   "key": "envoy.filters.http.rbac",
  2948                   "path": [
  2949                    {
  2950                     "key": "istio_dry_run_deny_shadow_engine_result"
  2951                    }
  2952                   ]
  2953                  }
  2954                 }
  2955                },
  2956                {
  2957                 "tag": "istio.canonical_revision",
  2958                 "literal": {
  2959                  "value": "v1"
  2960                 }
  2961                },
  2962                {
  2963                 "tag": "istio.canonical_service",
  2964                 "literal": {
  2965                  "value": "httpbin"
  2966                 }
  2967                },
  2968                {
  2969                 "tag": "istio.mesh_id",
  2970                 "literal": {
  2971                  "value": "cluster.local"
  2972                 }
  2973                },
  2974                {
  2975                 "tag": "istio.namespace",
  2976                 "literal": {
  2977                  "value": "default"
  2978                 }
  2979                }
  2980               ]
  2981              },
  2982              "use_remote_address": false,
  2983              "upgrade_configs": [
  2984               {
  2985                "upgrade_type": "websocket"
  2986               }
  2987              ],
  2988              "stream_idle_timeout": "0s",
  2989              "normalize_path": true,
  2990              "request_id_extension": {
  2991               "typed_config": {
  2992                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  2993                "use_request_id_for_trace_sampling": true
  2994               }
  2995              },
  2996              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  2997             }
  2998            }
  2999           ]
  3000          }
  3001         ],
  3002         "listener_filters": [
  3003          {
  3004           "name": "envoy.filters.listener.tls_inspector",
  3005           "typed_config": {
  3006            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  3007           }
  3008          },
  3009          {
  3010           "name": "envoy.filters.listener.http_inspector",
  3011           "typed_config": {
  3012            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  3013           }
  3014          }
  3015         ],
  3016         "listener_filters_timeout": "0s",
  3017         "traffic_direction": "OUTBOUND",
  3018         "continue_on_listener_filters_timeout": true,
  3019         "default_filter_chain": {
  3020          "filter_chain_match": {},
  3021          "filters": [
  3022           {
  3023            "name": "istio.stats",
  3024            "typed_config": {
  3025             "@type": "type.googleapis.com/stats.PluginConfig"
  3026            }
  3027           },
  3028           {
  3029            "name": "envoy.filters.network.tcp_proxy",
  3030            "typed_config": {
  3031             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3032             "stat_prefix": "PassthroughCluster",
  3033             "cluster": "PassthroughCluster"
  3034            }
  3035           }
  3036          ],
  3037          "name": "PassthroughFilterChain"
  3038         },
  3039         "bind_to_port": false
  3040        },
  3041        "last_updated": "2023-06-20T09:07:41.989Z"
  3042       }
  3043      },
  3044      {
  3045       "name": "10.100.4.52_443",
  3046       "active_state": {
  3047        "version_info": "2023-06-20T09:07:41Z/3",
  3048        "listener": {
  3049         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  3050         "name": "10.100.4.52_443",
  3051         "address": {
  3052          "socket_address": {
  3053           "address": "10.100.4.52",
  3054           "port_value": 443
  3055          }
  3056         },
  3057         "filter_chains": [
  3058          {
  3059           "filter_chain_match": {
  3060            "transport_protocol": "raw_buffer",
  3061            "application_protocols": [
  3062             "http/1.1",
  3063             "h2c"
  3064            ]
  3065           },
  3066           "filters": [
  3067            {
  3068             "name": "envoy.filters.network.http_connection_manager",
  3069             "typed_config": {
  3070              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  3071              "stat_prefix": "outbound_10.100.4.52_443",
  3072              "rds": {
  3073               "config_source": {
  3074                "ads": {},
  3075                "initial_fetch_timeout": "0s",
  3076                "resource_api_version": "V3"
  3077               },
  3078               "route_config_name": "webhook-service.metallb-system.svc.cluster.local:443"
  3079              },
  3080              "http_filters": [
  3081               {
  3082                "name": "istio.metadata_exchange",
  3083                "typed_config": {
  3084                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  3085                 "config": {
  3086                  "vm_config": {
  3087                   "runtime": "envoy.wasm.runtime.null",
  3088                   "code": {
  3089                    "local": {
  3090                     "inline_string": "envoy.wasm.metadata_exchange"
  3091                    }
  3092                   }
  3093                  },
  3094                  "configuration": {
  3095                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  3096                  }
  3097                 }
  3098                }
  3099               },
  3100               {
  3101                "name": "envoy.filters.http.grpc_stats",
  3102                "typed_config": {
  3103                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  3104                 "emit_filter_state": true,
  3105                 "stats_for_all_methods": false
  3106                }
  3107               },
  3108               {
  3109                "name": "istio.alpn",
  3110                "typed_config": {
  3111                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  3112                 "alpn_override": [
  3113                  {
  3114                   "alpn_override": [
  3115                    "istio-http/1.0",
  3116                    "istio",
  3117                    "http/1.0"
  3118                   ]
  3119                  },
  3120                  {
  3121                   "upstream_protocol": "HTTP11",
  3122                   "alpn_override": [
  3123                    "istio-http/1.1",
  3124                    "istio",
  3125                    "http/1.1"
  3126                   ]
  3127                  },
  3128                  {
  3129                   "upstream_protocol": "HTTP2",
  3130                   "alpn_override": [
  3131                    "istio-h2",
  3132                    "istio",
  3133                    "h2"
  3134                   ]
  3135                  }
  3136                 ]
  3137                }
  3138               },
  3139               {
  3140                "name": "envoy.filters.http.fault",
  3141                "typed_config": {
  3142                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  3143                }
  3144               },
  3145               {
  3146                "name": "envoy.filters.http.cors",
  3147                "typed_config": {
  3148                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  3149                }
  3150               },
  3151               {
  3152                "name": "istio.stats",
  3153                "typed_config": {
  3154                 "@type": "type.googleapis.com/stats.PluginConfig"
  3155                }
  3156               },
  3157               {
  3158                "name": "envoy.filters.http.router",
  3159                "typed_config": {
  3160                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  3161                }
  3162               }
  3163              ],
  3164              "tracing": {
  3165               "client_sampling": {
  3166                "value": 100
  3167               },
  3168               "random_sampling": {
  3169                "value": 1
  3170               },
  3171               "overall_sampling": {
  3172                "value": 100
  3173               },
  3174               "custom_tags": [
  3175                {
  3176                 "tag": "istio.authorization.dry_run.allow_policy.name",
  3177                 "metadata": {
  3178                  "kind": {
  3179                   "request": {}
  3180                  },
  3181                  "metadata_key": {
  3182                   "key": "envoy.filters.http.rbac",
  3183                   "path": [
  3184                    {
  3185                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  3186                    }
  3187                   ]
  3188                  }
  3189                 }
  3190                },
  3191                {
  3192                 "tag": "istio.authorization.dry_run.allow_policy.result",
  3193                 "metadata": {
  3194                  "kind": {
  3195                   "request": {}
  3196                  },
  3197                  "metadata_key": {
  3198                   "key": "envoy.filters.http.rbac",
  3199                   "path": [
  3200                    {
  3201                     "key": "istio_dry_run_allow_shadow_engine_result"
  3202                    }
  3203                   ]
  3204                  }
  3205                 }
  3206                },
  3207                {
  3208                 "tag": "istio.authorization.dry_run.deny_policy.name",
  3209                 "metadata": {
  3210                  "kind": {
  3211                   "request": {}
  3212                  },
  3213                  "metadata_key": {
  3214                   "key": "envoy.filters.http.rbac",
  3215                   "path": [
  3216                    {
  3217                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  3218                    }
  3219                   ]
  3220                  }
  3221                 }
  3222                },
  3223                {
  3224                 "tag": "istio.authorization.dry_run.deny_policy.result",
  3225                 "metadata": {
  3226                  "kind": {
  3227                   "request": {}
  3228                  },
  3229                  "metadata_key": {
  3230                   "key": "envoy.filters.http.rbac",
  3231                   "path": [
  3232                    {
  3233                     "key": "istio_dry_run_deny_shadow_engine_result"
  3234                    }
  3235                   ]
  3236                  }
  3237                 }
  3238                },
  3239                {
  3240                 "tag": "istio.canonical_revision",
  3241                 "literal": {
  3242                  "value": "v1"
  3243                 }
  3244                },
  3245                {
  3246                 "tag": "istio.canonical_service",
  3247                 "literal": {
  3248                  "value": "httpbin"
  3249                 }
  3250                },
  3251                {
  3252                 "tag": "istio.mesh_id",
  3253                 "literal": {
  3254                  "value": "cluster.local"
  3255                 }
  3256                },
  3257                {
  3258                 "tag": "istio.namespace",
  3259                 "literal": {
  3260                  "value": "default"
  3261                 }
  3262                }
  3263               ]
  3264              },
  3265              "use_remote_address": false,
  3266              "upgrade_configs": [
  3267               {
  3268                "upgrade_type": "websocket"
  3269               }
  3270              ],
  3271              "stream_idle_timeout": "0s",
  3272              "normalize_path": true,
  3273              "request_id_extension": {
  3274               "typed_config": {
  3275                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  3276                "use_request_id_for_trace_sampling": true
  3277               }
  3278              },
  3279              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  3280             }
  3281            }
  3282           ]
  3283          }
  3284         ],
  3285         "listener_filters": [
  3286          {
  3287           "name": "envoy.filters.listener.tls_inspector",
  3288           "typed_config": {
  3289            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  3290           }
  3291          },
  3292          {
  3293           "name": "envoy.filters.listener.http_inspector",
  3294           "typed_config": {
  3295            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  3296           }
  3297          }
  3298         ],
  3299         "listener_filters_timeout": "0s",
  3300         "traffic_direction": "OUTBOUND",
  3301         "continue_on_listener_filters_timeout": true,
  3302         "default_filter_chain": {
  3303          "filters": [
  3304           {
  3305            "name": "istio.stats",
  3306            "typed_config": {
  3307             "@type": "type.googleapis.com/stats.PluginConfig"
  3308            }
  3309           },
  3310           {
  3311            "name": "envoy.filters.network.tcp_proxy",
  3312            "typed_config": {
  3313             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3314             "stat_prefix": "outbound|443||webhook-service.metallb-system.svc.cluster.local",
  3315             "cluster": "outbound|443||webhook-service.metallb-system.svc.cluster.local"
  3316            }
  3317           }
  3318          ]
  3319         },
  3320         "bind_to_port": false
  3321        },
  3322        "last_updated": "2023-06-20T09:07:41.990Z"
  3323       }
  3324      },
  3325      {
  3326       "name": "0.0.0.0_5000",
  3327       "active_state": {
  3328        "version_info": "2023-06-20T09:07:41Z/3",
  3329        "listener": {
  3330         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  3331         "name": "0.0.0.0_5000",
  3332         "address": {
  3333          "socket_address": {
  3334           "address": "0.0.0.0",
  3335           "port_value": 5000
  3336          }
  3337         },
  3338         "filter_chains": [
  3339          {
  3340           "filter_chain_match": {
  3341            "transport_protocol": "raw_buffer",
  3342            "application_protocols": [
  3343             "http/1.1",
  3344             "h2c"
  3345            ]
  3346           },
  3347           "filters": [
  3348            {
  3349             "name": "envoy.filters.network.http_connection_manager",
  3350             "typed_config": {
  3351              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  3352              "stat_prefix": "outbound_0.0.0.0_5000",
  3353              "rds": {
  3354               "config_source": {
  3355                "ads": {},
  3356                "initial_fetch_timeout": "0s",
  3357                "resource_api_version": "V3"
  3358               },
  3359               "route_config_name": "5000"
  3360              },
  3361              "http_filters": [
  3362               {
  3363                "name": "istio.metadata_exchange",
  3364                "typed_config": {
  3365                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  3366                 "config": {
  3367                  "vm_config": {
  3368                   "runtime": "envoy.wasm.runtime.null",
  3369                   "code": {
  3370                    "local": {
  3371                     "inline_string": "envoy.wasm.metadata_exchange"
  3372                    }
  3373                   }
  3374                  },
  3375                  "configuration": {
  3376                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  3377                  }
  3378                 }
  3379                }
  3380               },
  3381               {
  3382                "name": "envoy.filters.http.grpc_stats",
  3383                "typed_config": {
  3384                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  3385                 "emit_filter_state": true,
  3386                 "stats_for_all_methods": false
  3387                }
  3388               },
  3389               {
  3390                "name": "istio.alpn",
  3391                "typed_config": {
  3392                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  3393                 "alpn_override": [
  3394                  {
  3395                   "alpn_override": [
  3396                    "istio-http/1.0",
  3397                    "istio",
  3398                    "http/1.0"
  3399                   ]
  3400                  },
  3401                  {
  3402                   "upstream_protocol": "HTTP11",
  3403                   "alpn_override": [
  3404                    "istio-http/1.1",
  3405                    "istio",
  3406                    "http/1.1"
  3407                   ]
  3408                  },
  3409                  {
  3410                   "upstream_protocol": "HTTP2",
  3411                   "alpn_override": [
  3412                    "istio-h2",
  3413                    "istio",
  3414                    "h2"
  3415                   ]
  3416                  }
  3417                 ]
  3418                }
  3419               },
  3420               {
  3421                "name": "envoy.filters.http.fault",
  3422                "typed_config": {
  3423                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  3424                }
  3425               },
  3426               {
  3427                "name": "envoy.filters.http.cors",
  3428                "typed_config": {
  3429                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  3430                }
  3431               },
  3432               {
  3433                "name": "istio.stats",
  3434                "typed_config": {
  3435                 "@type": "type.googleapis.com/stats.PluginConfig"
  3436                }
  3437               },
  3438               {
  3439                "name": "envoy.filters.http.router",
  3440                "typed_config": {
  3441                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  3442                }
  3443               }
  3444              ],
  3445              "tracing": {
  3446               "client_sampling": {
  3447                "value": 100
  3448               },
  3449               "random_sampling": {
  3450                "value": 1
  3451               },
  3452               "overall_sampling": {
  3453                "value": 100
  3454               },
  3455               "custom_tags": [
  3456                {
  3457                 "tag": "istio.authorization.dry_run.allow_policy.name",
  3458                 "metadata": {
  3459                  "kind": {
  3460                   "request": {}
  3461                  },
  3462                  "metadata_key": {
  3463                   "key": "envoy.filters.http.rbac",
  3464                   "path": [
  3465                    {
  3466                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  3467                    }
  3468                   ]
  3469                  }
  3470                 }
  3471                },
  3472                {
  3473                 "tag": "istio.authorization.dry_run.allow_policy.result",
  3474                 "metadata": {
  3475                  "kind": {
  3476                   "request": {}
  3477                  },
  3478                  "metadata_key": {
  3479                   "key": "envoy.filters.http.rbac",
  3480                   "path": [
  3481                    {
  3482                     "key": "istio_dry_run_allow_shadow_engine_result"
  3483                    }
  3484                   ]
  3485                  }
  3486                 }
  3487                },
  3488                {
  3489                 "tag": "istio.authorization.dry_run.deny_policy.name",
  3490                 "metadata": {
  3491                  "kind": {
  3492                   "request": {}
  3493                  },
  3494                  "metadata_key": {
  3495                   "key": "envoy.filters.http.rbac",
  3496                   "path": [
  3497                    {
  3498                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  3499                    }
  3500                   ]
  3501                  }
  3502                 }
  3503                },
  3504                {
  3505                 "tag": "istio.authorization.dry_run.deny_policy.result",
  3506                 "metadata": {
  3507                  "kind": {
  3508                   "request": {}
  3509                  },
  3510                  "metadata_key": {
  3511                   "key": "envoy.filters.http.rbac",
  3512                   "path": [
  3513                    {
  3514                     "key": "istio_dry_run_deny_shadow_engine_result"
  3515                    }
  3516                   ]
  3517                  }
  3518                 }
  3519                },
  3520                {
  3521                 "tag": "istio.canonical_revision",
  3522                 "literal": {
  3523                  "value": "v1"
  3524                 }
  3525                },
  3526                {
  3527                 "tag": "istio.canonical_service",
  3528                 "literal": {
  3529                  "value": "httpbin"
  3530                 }
  3531                },
  3532                {
  3533                 "tag": "istio.mesh_id",
  3534                 "literal": {
  3535                  "value": "cluster.local"
  3536                 }
  3537                },
  3538                {
  3539                 "tag": "istio.namespace",
  3540                 "literal": {
  3541                  "value": "default"
  3542                 }
  3543                }
  3544               ]
  3545              },
  3546              "use_remote_address": false,
  3547              "upgrade_configs": [
  3548               {
  3549                "upgrade_type": "websocket"
  3550               }
  3551              ],
  3552              "stream_idle_timeout": "0s",
  3553              "normalize_path": true,
  3554              "request_id_extension": {
  3555               "typed_config": {
  3556                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  3557                "use_request_id_for_trace_sampling": true
  3558               }
  3559              },
  3560              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  3561             }
  3562            }
  3563           ]
  3564          }
  3565         ],
  3566         "listener_filters": [
  3567          {
  3568           "name": "envoy.filters.listener.tls_inspector",
  3569           "typed_config": {
  3570            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  3571           }
  3572          },
  3573          {
  3574           "name": "envoy.filters.listener.http_inspector",
  3575           "typed_config": {
  3576            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  3577           }
  3578          }
  3579         ],
  3580         "listener_filters_timeout": "0s",
  3581         "traffic_direction": "OUTBOUND",
  3582         "continue_on_listener_filters_timeout": true,
  3583         "default_filter_chain": {
  3584          "filter_chain_match": {},
  3585          "filters": [
  3586           {
  3587            "name": "istio.stats",
  3588            "typed_config": {
  3589             "@type": "type.googleapis.com/stats.PluginConfig"
  3590            }
  3591           },
  3592           {
  3593            "name": "envoy.filters.network.tcp_proxy",
  3594            "typed_config": {
  3595             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3596             "stat_prefix": "PassthroughCluster",
  3597             "cluster": "PassthroughCluster"
  3598            }
  3599           }
  3600          ],
  3601          "name": "PassthroughFilterChain"
  3602         },
  3603         "bind_to_port": false
  3604        },
  3605        "last_updated": "2023-06-20T09:07:41.991Z"
  3606       }
  3607      },
  3608      {
  3609       "name": "10.102.11.148_15008",
  3610       "active_state": {
  3611        "version_info": "2023-06-20T09:07:41Z/3",
  3612        "listener": {
  3613         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  3614         "name": "10.102.11.148_15008",
  3615         "address": {
  3616          "socket_address": {
  3617           "address": "10.102.11.148",
  3618           "port_value": 15008
  3619          }
  3620         },
  3621         "filter_chains": [
  3622          {
  3623           "filter_chain_match": {
  3624            "transport_protocol": "raw_buffer",
  3625            "application_protocols": [
  3626             "http/1.1",
  3627             "h2c"
  3628            ]
  3629           },
  3630           "filters": [
  3631            {
  3632             "name": "envoy.filters.network.http_connection_manager",
  3633             "typed_config": {
  3634              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  3635              "stat_prefix": "outbound_10.102.11.148_15008",
  3636              "rds": {
  3637               "config_source": {
  3638                "ads": {},
  3639                "initial_fetch_timeout": "0s",
  3640                "resource_api_version": "V3"
  3641               },
  3642               "route_config_name": "ratings-istio-waypoint.ambient.svc.cluster.local:15008"
  3643              },
  3644              "http_filters": [
  3645               {
  3646                "name": "istio.metadata_exchange",
  3647                "typed_config": {
  3648                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  3649                 "config": {
  3650                  "vm_config": {
  3651                   "runtime": "envoy.wasm.runtime.null",
  3652                   "code": {
  3653                    "local": {
  3654                     "inline_string": "envoy.wasm.metadata_exchange"
  3655                    }
  3656                   }
  3657                  },
  3658                  "configuration": {
  3659                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  3660                  }
  3661                 }
  3662                }
  3663               },
  3664               {
  3665                "name": "envoy.filters.http.grpc_stats",
  3666                "typed_config": {
  3667                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  3668                 "emit_filter_state": true,
  3669                 "stats_for_all_methods": false
  3670                }
  3671               },
  3672               {
  3673                "name": "istio.alpn",
  3674                "typed_config": {
  3675                 "@type": "type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig",
  3676                 "alpn_override": [
  3677                  {
  3678                   "alpn_override": [
  3679                    "istio-http/1.0",
  3680                    "istio",
  3681                    "http/1.0"
  3682                   ]
  3683                  },
  3684                  {
  3685                   "upstream_protocol": "HTTP11",
  3686                   "alpn_override": [
  3687                    "istio-http/1.1",
  3688                    "istio",
  3689                    "http/1.1"
  3690                   ]
  3691                  },
  3692                  {
  3693                   "upstream_protocol": "HTTP2",
  3694                   "alpn_override": [
  3695                    "istio-h2",
  3696                    "istio",
  3697                    "h2"
  3698                   ]
  3699                  }
  3700                 ]
  3701                }
  3702               },
  3703               {
  3704                "name": "envoy.filters.http.fault",
  3705                "typed_config": {
  3706                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  3707                }
  3708               },
  3709               {
  3710                "name": "envoy.filters.http.cors",
  3711                "typed_config": {
  3712                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  3713                }
  3714               },
  3715               {
  3716                "name": "istio.stats",
  3717                "typed_config": {
  3718                 "@type": "type.googleapis.com/stats.PluginConfig"
  3719                }
  3720               },
  3721               {
  3722                "name": "envoy.filters.http.router",
  3723                "typed_config": {
  3724                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  3725                }
  3726               }
  3727              ],
  3728              "tracing": {
  3729               "client_sampling": {
  3730                "value": 100
  3731               },
  3732               "random_sampling": {
  3733                "value": 1
  3734               },
  3735               "overall_sampling": {
  3736                "value": 100
  3737               },
  3738               "custom_tags": [
  3739                {
  3740                 "tag": "istio.authorization.dry_run.allow_policy.name",
  3741                 "metadata": {
  3742                  "kind": {
  3743                   "request": {}
  3744                  },
  3745                  "metadata_key": {
  3746                   "key": "envoy.filters.http.rbac",
  3747                   "path": [
  3748                    {
  3749                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  3750                    }
  3751                   ]
  3752                  }
  3753                 }
  3754                },
  3755                {
  3756                 "tag": "istio.authorization.dry_run.allow_policy.result",
  3757                 "metadata": {
  3758                  "kind": {
  3759                   "request": {}
  3760                  },
  3761                  "metadata_key": {
  3762                   "key": "envoy.filters.http.rbac",
  3763                   "path": [
  3764                    {
  3765                     "key": "istio_dry_run_allow_shadow_engine_result"
  3766                    }
  3767                   ]
  3768                  }
  3769                 }
  3770                },
  3771                {
  3772                 "tag": "istio.authorization.dry_run.deny_policy.name",
  3773                 "metadata": {
  3774                  "kind": {
  3775                   "request": {}
  3776                  },
  3777                  "metadata_key": {
  3778                   "key": "envoy.filters.http.rbac",
  3779                   "path": [
  3780                    {
  3781                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  3782                    }
  3783                   ]
  3784                  }
  3785                 }
  3786                },
  3787                {
  3788                 "tag": "istio.authorization.dry_run.deny_policy.result",
  3789                 "metadata": {
  3790                  "kind": {
  3791                   "request": {}
  3792                  },
  3793                  "metadata_key": {
  3794                   "key": "envoy.filters.http.rbac",
  3795                   "path": [
  3796                    {
  3797                     "key": "istio_dry_run_deny_shadow_engine_result"
  3798                    }
  3799                   ]
  3800                  }
  3801                 }
  3802                },
  3803                {
  3804                 "tag": "istio.canonical_revision",
  3805                 "literal": {
  3806                  "value": "v1"
  3807                 }
  3808                },
  3809                {
  3810                 "tag": "istio.canonical_service",
  3811                 "literal": {
  3812                  "value": "httpbin"
  3813                 }
  3814                },
  3815                {
  3816                 "tag": "istio.mesh_id",
  3817                 "literal": {
  3818                  "value": "cluster.local"
  3819                 }
  3820                },
  3821                {
  3822                 "tag": "istio.namespace",
  3823                 "literal": {
  3824                  "value": "default"
  3825                 }
  3826                }
  3827               ]
  3828              },
  3829              "use_remote_address": false,
  3830              "upgrade_configs": [
  3831               {
  3832                "upgrade_type": "websocket"
  3833               }
  3834              ],
  3835              "stream_idle_timeout": "0s",
  3836              "normalize_path": true,
  3837              "request_id_extension": {
  3838               "typed_config": {
  3839                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  3840                "use_request_id_for_trace_sampling": true
  3841               }
  3842              },
  3843              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  3844             }
  3845            }
  3846           ]
  3847          }
  3848         ],
  3849         "listener_filters": [
  3850          {
  3851           "name": "envoy.filters.listener.tls_inspector",
  3852           "typed_config": {
  3853            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  3854           }
  3855          },
  3856          {
  3857           "name": "envoy.filters.listener.http_inspector",
  3858           "typed_config": {
  3859            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  3860           }
  3861          }
  3862         ],
  3863         "listener_filters_timeout": "0s",
  3864         "traffic_direction": "OUTBOUND",
  3865         "continue_on_listener_filters_timeout": true,
  3866         "default_filter_chain": {
  3867          "filters": [
  3868           {
  3869            "name": "istio.stats",
  3870            "typed_config": {
  3871             "@type": "type.googleapis.com/stats.PluginConfig"
  3872            }
  3873           },
  3874           {
  3875            "name": "envoy.filters.network.tcp_proxy",
  3876            "typed_config": {
  3877             "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3878             "stat_prefix": "outbound|15008||ratings-istio-waypoint.ambient.svc.cluster.local",
  3879             "cluster": "outbound|15008||ratings-istio-waypoint.ambient.svc.cluster.local"
  3880            }
  3881           }
  3882          ]
  3883         },
  3884         "bind_to_port": false
  3885        },
  3886        "last_updated": "2023-06-20T09:07:41.991Z"
  3887       }
  3888      },
  3889      {
  3890       "name": "virtualOutbound",
  3891       "active_state": {
  3892        "version_info": "2023-06-20T09:07:41Z/3",
  3893        "listener": {
  3894         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  3895         "name": "virtualOutbound",
  3896         "address": {
  3897          "socket_address": {
  3898           "address": "0.0.0.0",
  3899           "port_value": 15001
  3900          }
  3901         },
  3902         "filter_chains": [
  3903          {
  3904           "filter_chain_match": {
  3905            "destination_port": 15001
  3906           },
  3907           "filters": [
  3908            {
  3909             "name": "istio.stats",
  3910             "typed_config": {
  3911              "@type": "type.googleapis.com/stats.PluginConfig"
  3912             }
  3913            },
  3914            {
  3915             "name": "envoy.filters.network.tcp_proxy",
  3916             "typed_config": {
  3917              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3918              "stat_prefix": "BlackHoleCluster",
  3919              "cluster": "BlackHoleCluster"
  3920             }
  3921            }
  3922           ],
  3923           "name": "virtualOutbound-blackhole"
  3924          },
  3925          {
  3926           "filters": [
  3927            {
  3928             "name": "istio.stats",
  3929             "typed_config": {
  3930              "@type": "type.googleapis.com/stats.PluginConfig"
  3931             }
  3932            },
  3933            {
  3934             "name": "envoy.filters.network.tcp_proxy",
  3935             "typed_config": {
  3936              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3937              "stat_prefix": "PassthroughCluster",
  3938              "cluster": "PassthroughCluster"
  3939             }
  3940            }
  3941           ],
  3942           "name": "virtualOutbound-catchall-tcp"
  3943          }
  3944         ],
  3945         "use_original_dst": true,
  3946         "traffic_direction": "OUTBOUND"
  3947        },
  3948        "last_updated": "2023-06-20T09:07:41.992Z"
  3949       }
  3950      },
  3951      {
  3952       "name": "virtualInbound",
  3953       "active_state": {
  3954        "version_info": "2023-06-20T09:07:41Z/3",
  3955        "listener": {
  3956         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  3957         "name": "virtualInbound",
  3958         "address": {
  3959          "socket_address": {
  3960           "address": "0.0.0.0",
  3961           "port_value": 15006
  3962          }
  3963         },
  3964         "filter_chains": [
  3965          {
  3966           "filter_chain_match": {
  3967            "destination_port": 15006
  3968           },
  3969           "filters": [
  3970            {
  3971             "name": "istio.metadata_exchange",
  3972             "typed_config": {
  3973              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  3974              "protocol": "istio-peer-exchange"
  3975             }
  3976            },
  3977            {
  3978             "name": "istio.stats",
  3979             "typed_config": {
  3980              "@type": "type.googleapis.com/stats.PluginConfig",
  3981              "disable_host_header_fallback": true
  3982             }
  3983            },
  3984            {
  3985             "name": "envoy.filters.network.tcp_proxy",
  3986             "typed_config": {
  3987              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  3988              "stat_prefix": "BlackHoleCluster",
  3989              "cluster": "BlackHoleCluster"
  3990             }
  3991            }
  3992           ],
  3993           "name": "virtualInbound-blackhole"
  3994          },
  3995          {
  3996           "filter_chain_match": {
  3997            "prefix_ranges": [
  3998             {
  3999              "address_prefix": "0.0.0.0",
  4000              "prefix_len": 0
  4001             }
  4002            ],
  4003            "transport_protocol": "tls",
  4004            "application_protocols": [
  4005             "istio-http/1.0",
  4006             "istio-http/1.1",
  4007             "istio-h2"
  4008            ]
  4009           },
  4010           "filters": [
  4011            {
  4012             "name": "istio_authn",
  4013             "typed_config": {
  4014              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  4015              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  4016             }
  4017            },
  4018            {
  4019             "name": "istio.metadata_exchange",
  4020             "typed_config": {
  4021              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  4022              "protocol": "istio-peer-exchange"
  4023             }
  4024            },
  4025            {
  4026             "name": "envoy.filters.network.http_connection_manager",
  4027             "typed_config": {
  4028              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  4029              "stat_prefix": "InboundPassthroughClusterIpv4",
  4030              "route_config": {
  4031               "name": "InboundPassthroughClusterIpv4",
  4032               "virtual_hosts": [
  4033                {
  4034                 "name": "inbound|http|0",
  4035                 "domains": [
  4036                  "*"
  4037                 ],
  4038                 "routes": [
  4039                  {
  4040                   "match": {
  4041                    "prefix": "/"
  4042                   },
  4043                   "route": {
  4044                    "cluster": "InboundPassthroughClusterIpv4",
  4045                    "timeout": "0s",
  4046                    "max_stream_duration": {
  4047                     "max_stream_duration": "0s",
  4048                     "grpc_timeout_header_max": "0s"
  4049                    }
  4050                   },
  4051                   "decorator": {
  4052                    "operation": ":0/*"
  4053                   },
  4054                   "name": "default"
  4055                  }
  4056                 ]
  4057                }
  4058               ],
  4059               "validate_clusters": false
  4060              },
  4061              "http_filters": [
  4062               {
  4063                "name": "istio.metadata_exchange",
  4064                "typed_config": {
  4065                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  4066                 "config": {
  4067                  "vm_config": {
  4068                   "runtime": "envoy.wasm.runtime.null",
  4069                   "code": {
  4070                    "local": {
  4071                     "inline_string": "envoy.wasm.metadata_exchange"
  4072                    }
  4073                   }
  4074                  },
  4075                  "configuration": {
  4076                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  4077                  }
  4078                 }
  4079                }
  4080               },
  4081               {
  4082                "name": "envoy.filters.http.rbac",
  4083                "typed_config": {
  4084                 "@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
  4085                 "rules": {
  4086                  "policies": {
  4087                   "ns[default]-policy[httpbin]-rule[0]": {
  4088                    "permissions": [
  4089                     {
  4090                      "and_rules": {
  4091                       "rules": [
  4092                        {
  4093                         "or_rules": {
  4094                          "rules": [
  4095                           {
  4096                            "header": {
  4097                             "name": ":method",
  4098                             "exact_match": "GET"
  4099                            }
  4100                           }
  4101                          ]
  4102                         }
  4103                        },
  4104                        {
  4105                         "or_rules": {
  4106                          "rules": [
  4107                           {
  4108                            "url_path": {
  4109                             "path": {
  4110                              "prefix": "/info"
  4111                             }
  4112                            }
  4113                           }
  4114                          ]
  4115                         }
  4116                        }
  4117                       ]
  4118                      }
  4119                     },
  4120                     {
  4121                      "and_rules": {
  4122                       "rules": [
  4123                        {
  4124                         "or_rules": {
  4125                          "rules": [
  4126                           {
  4127                            "header": {
  4128                             "name": ":method",
  4129                             "exact_match": "POST"
  4130                            }
  4131                           }
  4132                          ]
  4133                         }
  4134                        },
  4135                        {
  4136                         "or_rules": {
  4137                          "rules": [
  4138                           {
  4139                            "url_path": {
  4140                             "path": {
  4141                              "exact": "/data"
  4142                             }
  4143                            }
  4144                           }
  4145                          ]
  4146                         }
  4147                        }
  4148                       ]
  4149                      }
  4150                     }
  4151                    ],
  4152                    "principals": [
  4153                     {
  4154                      "and_ids": {
  4155                       "ids": [
  4156                        {
  4157                         "or_ids": {
  4158                          "ids": [
  4159                           {
  4160                            "filter_state": {
  4161                             "key": "io.istio.peer_principal",
  4162                             "string_match": {
  4163                              "exact": "spiffe://cluster.local/ns/default/sa/sleep"
  4164                             }
  4165                            }
  4166                           }
  4167                          ]
  4168                         }
  4169                        },
  4170                        {
  4171                         "or_ids": {
  4172                          "ids": [
  4173                           {
  4174                            "metadata": {
  4175                             "filter": "istio_authn",
  4176                             "path": [
  4177                              {
  4178                               "key": "request.auth.claims"
  4179                              },
  4180                              {
  4181                               "key": "iss"
  4182                              }
  4183                             ],
  4184                             "value": {
  4185                              "list_match": {
  4186                               "one_of": {
  4187                                "string_match": {
  4188                                 "exact": "https://accounts.google.com"
  4189                                }
  4190                               }
  4191                              }
  4192                             }
  4193                            }
  4194                           }
  4195                          ]
  4196                         }
  4197                        }
  4198                       ]
  4199                      }
  4200                     },
  4201                     {
  4202                      "and_ids": {
  4203                       "ids": [
  4204                        {
  4205                         "or_ids": {
  4206                          "ids": [
  4207                           {
  4208                            "filter_state": {
  4209                             "key": "io.istio.peer_principal",
  4210                             "string_match": {
  4211                              "safe_regex": {
  4212                               "regex": ".*/ns/test/.*"
  4213                              }
  4214                             }
  4215                            }
  4216                           }
  4217                          ]
  4218                         }
  4219                        },
  4220                        {
  4221                         "or_ids": {
  4222                          "ids": [
  4223                           {
  4224                            "metadata": {
  4225                             "filter": "istio_authn",
  4226                             "path": [
  4227                              {
  4228                               "key": "request.auth.claims"
  4229                              },
  4230                              {
  4231                               "key": "iss"
  4232                              }
  4233                             ],
  4234                             "value": {
  4235                              "list_match": {
  4236                               "one_of": {
  4237                                "string_match": {
  4238                                 "exact": "https://accounts.google.com"
  4239                                }
  4240                               }
  4241                              }
  4242                             }
  4243                            }
  4244                           }
  4245                          ]
  4246                         }
  4247                        }
  4248                       ]
  4249                      }
  4250                     }
  4251                    ]
  4252                   }
  4253                  }
  4254                 },
  4255                 "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  4256                }
  4257               },
  4258               {
  4259                "name": "envoy.filters.http.grpc_stats",
  4260                "typed_config": {
  4261                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  4262                 "emit_filter_state": true,
  4263                 "stats_for_all_methods": false
  4264                }
  4265               },
  4266               {
  4267                "name": "envoy.filters.http.fault",
  4268                "typed_config": {
  4269                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  4270                }
  4271               },
  4272               {
  4273                "name": "envoy.filters.http.cors",
  4274                "typed_config": {
  4275                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  4276                }
  4277               },
  4278               {
  4279                "name": "istio.stats",
  4280                "typed_config": {
  4281                 "@type": "type.googleapis.com/stats.PluginConfig",
  4282                 "disable_host_header_fallback": true
  4283                }
  4284               },
  4285               {
  4286                "name": "envoy.filters.http.router",
  4287                "typed_config": {
  4288                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  4289                }
  4290               }
  4291              ],
  4292              "tracing": {
  4293               "client_sampling": {
  4294                "value": 100
  4295               },
  4296               "random_sampling": {
  4297                "value": 1
  4298               },
  4299               "overall_sampling": {
  4300                "value": 100
  4301               },
  4302               "custom_tags": [
  4303                {
  4304                 "tag": "istio.authorization.dry_run.allow_policy.name",
  4305                 "metadata": {
  4306                  "kind": {
  4307                   "request": {}
  4308                  },
  4309                  "metadata_key": {
  4310                   "key": "envoy.filters.http.rbac",
  4311                   "path": [
  4312                    {
  4313                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  4314                    }
  4315                   ]
  4316                  }
  4317                 }
  4318                },
  4319                {
  4320                 "tag": "istio.authorization.dry_run.allow_policy.result",
  4321                 "metadata": {
  4322                  "kind": {
  4323                   "request": {}
  4324                  },
  4325                  "metadata_key": {
  4326                   "key": "envoy.filters.http.rbac",
  4327                   "path": [
  4328                    {
  4329                     "key": "istio_dry_run_allow_shadow_engine_result"
  4330                    }
  4331                   ]
  4332                  }
  4333                 }
  4334                },
  4335                {
  4336                 "tag": "istio.authorization.dry_run.deny_policy.name",
  4337                 "metadata": {
  4338                  "kind": {
  4339                   "request": {}
  4340                  },
  4341                  "metadata_key": {
  4342                   "key": "envoy.filters.http.rbac",
  4343                   "path": [
  4344                    {
  4345                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  4346                    }
  4347                   ]
  4348                  }
  4349                 }
  4350                },
  4351                {
  4352                 "tag": "istio.authorization.dry_run.deny_policy.result",
  4353                 "metadata": {
  4354                  "kind": {
  4355                   "request": {}
  4356                  },
  4357                  "metadata_key": {
  4358                   "key": "envoy.filters.http.rbac",
  4359                   "path": [
  4360                    {
  4361                     "key": "istio_dry_run_deny_shadow_engine_result"
  4362                    }
  4363                   ]
  4364                  }
  4365                 }
  4366                },
  4367                {
  4368                 "tag": "istio.canonical_revision",
  4369                 "literal": {
  4370                  "value": "v1"
  4371                 }
  4372                },
  4373                {
  4374                 "tag": "istio.canonical_service",
  4375                 "literal": {
  4376                  "value": "httpbin"
  4377                 }
  4378                },
  4379                {
  4380                 "tag": "istio.mesh_id",
  4381                 "literal": {
  4382                  "value": "cluster.local"
  4383                 }
  4384                },
  4385                {
  4386                 "tag": "istio.namespace",
  4387                 "literal": {
  4388                  "value": "default"
  4389                 }
  4390                }
  4391               ]
  4392              },
  4393              "server_name": "istio-envoy",
  4394              "use_remote_address": false,
  4395              "forward_client_cert_details": "APPEND_FORWARD",
  4396              "set_current_client_cert_details": {
  4397               "subject": true,
  4398               "dns": true,
  4399               "uri": true
  4400              },
  4401              "upgrade_configs": [
  4402               {
  4403                "upgrade_type": "websocket"
  4404               }
  4405              ],
  4406              "stream_idle_timeout": "0s",
  4407              "normalize_path": true,
  4408              "request_id_extension": {
  4409               "typed_config": {
  4410                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  4411                "use_request_id_for_trace_sampling": true
  4412               }
  4413              },
  4414              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  4415             }
  4416            }
  4417           ],
  4418           "transport_socket": {
  4419            "name": "envoy.transport_sockets.tls",
  4420            "typed_config": {
  4421             "@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
  4422             "common_tls_context": {
  4423              "tls_params": {
  4424               "tls_minimum_protocol_version": "TLSv1_2",
  4425               "tls_maximum_protocol_version": "TLSv1_3",
  4426               "cipher_suites": [
  4427                "ECDHE-ECDSA-AES256-GCM-SHA384",
  4428                "ECDHE-RSA-AES256-GCM-SHA384",
  4429                "ECDHE-ECDSA-AES128-GCM-SHA256",
  4430                "ECDHE-RSA-AES128-GCM-SHA256",
  4431                "AES256-GCM-SHA384",
  4432                "AES128-GCM-SHA256"
  4433               ]
  4434              },
  4435              "alpn_protocols": [
  4436               "h2",
  4437               "http/1.1"
  4438              ],
  4439              "tls_certificate_sds_secret_configs": [
  4440               {
  4441                "name": "default",
  4442                "sds_config": {
  4443                 "api_config_source": {
  4444                  "api_type": "GRPC",
  4445                  "grpc_services": [
  4446                   {
  4447                    "envoy_grpc": {
  4448                     "cluster_name": "sds-grpc"
  4449                    }
  4450                   }
  4451                  ],
  4452                  "set_node_on_first_message_only": true,
  4453                  "transport_api_version": "V3"
  4454                 },
  4455                 "initial_fetch_timeout": "0s",
  4456                 "resource_api_version": "V3"
  4457                }
  4458               }
  4459              ],
  4460              "combined_validation_context": {
  4461               "default_validation_context": {
  4462                "match_subject_alt_names": [
  4463                 {
  4464                  "prefix": "spiffe://cluster.local/"
  4465                 }
  4466                ]
  4467               },
  4468               "validation_context_sds_secret_config": {
  4469                "name": "ROOTCA",
  4470                "sds_config": {
  4471                 "api_config_source": {
  4472                  "api_type": "GRPC",
  4473                  "grpc_services": [
  4474                   {
  4475                    "envoy_grpc": {
  4476                     "cluster_name": "sds-grpc"
  4477                    }
  4478                   }
  4479                  ],
  4480                  "set_node_on_first_message_only": true,
  4481                  "transport_api_version": "V3"
  4482                 },
  4483                 "initial_fetch_timeout": "0s",
  4484                 "resource_api_version": "V3"
  4485                }
  4486               }
  4487              }
  4488             },
  4489             "require_client_certificate": true
  4490            }
  4491           },
  4492           "name": "virtualInbound-catchall-http"
  4493          },
  4494          {
  4495           "filter_chain_match": {
  4496            "prefix_ranges": [
  4497             {
  4498              "address_prefix": "0.0.0.0",
  4499              "prefix_len": 0
  4500             }
  4501            ],
  4502            "transport_protocol": "raw_buffer",
  4503            "application_protocols": [
  4504             "http/1.1",
  4505             "h2c"
  4506            ]
  4507           },
  4508           "filters": [
  4509            {
  4510             "name": "istio_authn",
  4511             "typed_config": {
  4512              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  4513              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  4514             }
  4515            },
  4516            {
  4517             "name": "istio.metadata_exchange",
  4518             "typed_config": {
  4519              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  4520              "protocol": "istio-peer-exchange"
  4521             }
  4522            },
  4523            {
  4524             "name": "envoy.filters.network.http_connection_manager",
  4525             "typed_config": {
  4526              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  4527              "stat_prefix": "InboundPassthroughClusterIpv4",
  4528              "route_config": {
  4529               "name": "InboundPassthroughClusterIpv4",
  4530               "virtual_hosts": [
  4531                {
  4532                 "name": "inbound|http|0",
  4533                 "domains": [
  4534                  "*"
  4535                 ],
  4536                 "routes": [
  4537                  {
  4538                   "match": {
  4539                    "prefix": "/"
  4540                   },
  4541                   "route": {
  4542                    "cluster": "InboundPassthroughClusterIpv4",
  4543                    "timeout": "0s",
  4544                    "max_stream_duration": {
  4545                     "max_stream_duration": "0s",
  4546                     "grpc_timeout_header_max": "0s"
  4547                    }
  4548                   },
  4549                   "decorator": {
  4550                    "operation": ":0/*"
  4551                   },
  4552                   "name": "default"
  4553                  }
  4554                 ]
  4555                }
  4556               ],
  4557               "validate_clusters": false
  4558              },
  4559              "http_filters": [
  4560               {
  4561                "name": "istio.metadata_exchange",
  4562                "typed_config": {
  4563                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  4564                 "config": {
  4565                  "vm_config": {
  4566                   "runtime": "envoy.wasm.runtime.null",
  4567                   "code": {
  4568                    "local": {
  4569                     "inline_string": "envoy.wasm.metadata_exchange"
  4570                    }
  4571                   }
  4572                  },
  4573                  "configuration": {
  4574                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  4575                  }
  4576                 }
  4577                }
  4578               },
  4579               {
  4580                "name": "envoy.filters.http.rbac",
  4581                "typed_config": {
  4582                 "@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
  4583                 "rules": {
  4584                  "policies": {
  4585                   "ns[default]-policy[httpbin]-rule[0]": {
  4586                    "permissions": [
  4587                     {
  4588                      "and_rules": {
  4589                       "rules": [
  4590                        {
  4591                         "or_rules": {
  4592                          "rules": [
  4593                           {
  4594                            "header": {
  4595                             "name": ":method",
  4596                             "exact_match": "GET"
  4597                            }
  4598                           }
  4599                          ]
  4600                         }
  4601                        },
  4602                        {
  4603                         "or_rules": {
  4604                          "rules": [
  4605                           {
  4606                            "url_path": {
  4607                             "path": {
  4608                              "prefix": "/info"
  4609                             }
  4610                            }
  4611                           }
  4612                          ]
  4613                         }
  4614                        }
  4615                       ]
  4616                      }
  4617                     },
  4618                     {
  4619                      "and_rules": {
  4620                       "rules": [
  4621                        {
  4622                         "or_rules": {
  4623                          "rules": [
  4624                           {
  4625                            "header": {
  4626                             "name": ":method",
  4627                             "exact_match": "POST"
  4628                            }
  4629                           }
  4630                          ]
  4631                         }
  4632                        },
  4633                        {
  4634                         "or_rules": {
  4635                          "rules": [
  4636                           {
  4637                            "url_path": {
  4638                             "path": {
  4639                              "exact": "/data"
  4640                             }
  4641                            }
  4642                           }
  4643                          ]
  4644                         }
  4645                        }
  4646                       ]
  4647                      }
  4648                     }
  4649                    ],
  4650                    "principals": [
  4651                     {
  4652                      "and_ids": {
  4653                       "ids": [
  4654                        {
  4655                         "or_ids": {
  4656                          "ids": [
  4657                           {
  4658                            "filter_state": {
  4659                             "key": "io.istio.peer_principal",
  4660                             "string_match": {
  4661                              "exact": "spiffe://cluster.local/ns/default/sa/sleep"
  4662                             }
  4663                            }
  4664                           }
  4665                          ]
  4666                         }
  4667                        },
  4668                        {
  4669                         "or_ids": {
  4670                          "ids": [
  4671                           {
  4672                            "metadata": {
  4673                             "filter": "istio_authn",
  4674                             "path": [
  4675                              {
  4676                               "key": "request.auth.claims"
  4677                              },
  4678                              {
  4679                               "key": "iss"
  4680                              }
  4681                             ],
  4682                             "value": {
  4683                              "list_match": {
  4684                               "one_of": {
  4685                                "string_match": {
  4686                                 "exact": "https://accounts.google.com"
  4687                                }
  4688                               }
  4689                              }
  4690                             }
  4691                            }
  4692                           }
  4693                          ]
  4694                         }
  4695                        }
  4696                       ]
  4697                      }
  4698                     },
  4699                     {
  4700                      "and_ids": {
  4701                       "ids": [
  4702                        {
  4703                         "or_ids": {
  4704                          "ids": [
  4705                           {
  4706                            "filter_state": {
  4707                             "key": "io.istio.peer_principal",
  4708                             "string_match": {
  4709                              "safe_regex": {
  4710                               "regex": ".*/ns/test/.*"
  4711                              }
  4712                             }
  4713                            }
  4714                           }
  4715                          ]
  4716                         }
  4717                        },
  4718                        {
  4719                         "or_ids": {
  4720                          "ids": [
  4721                           {
  4722                            "metadata": {
  4723                             "filter": "istio_authn",
  4724                             "path": [
  4725                              {
  4726                               "key": "request.auth.claims"
  4727                              },
  4728                              {
  4729                               "key": "iss"
  4730                              }
  4731                             ],
  4732                             "value": {
  4733                              "list_match": {
  4734                               "one_of": {
  4735                                "string_match": {
  4736                                 "exact": "https://accounts.google.com"
  4737                                }
  4738                               }
  4739                              }
  4740                             }
  4741                            }
  4742                           }
  4743                          ]
  4744                         }
  4745                        }
  4746                       ]
  4747                      }
  4748                     }
  4749                    ]
  4750                   }
  4751                  }
  4752                 },
  4753                 "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  4754                }
  4755               },
  4756               {
  4757                "name": "envoy.filters.http.grpc_stats",
  4758                "typed_config": {
  4759                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  4760                 "emit_filter_state": true,
  4761                 "stats_for_all_methods": false
  4762                }
  4763               },
  4764               {
  4765                "name": "envoy.filters.http.fault",
  4766                "typed_config": {
  4767                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  4768                }
  4769               },
  4770               {
  4771                "name": "envoy.filters.http.cors",
  4772                "typed_config": {
  4773                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  4774                }
  4775               },
  4776               {
  4777                "name": "istio.stats",
  4778                "typed_config": {
  4779                 "@type": "type.googleapis.com/stats.PluginConfig",
  4780                 "disable_host_header_fallback": true
  4781                }
  4782               },
  4783               {
  4784                "name": "envoy.filters.http.router",
  4785                "typed_config": {
  4786                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  4787                }
  4788               }
  4789              ],
  4790              "tracing": {
  4791               "client_sampling": {
  4792                "value": 100
  4793               },
  4794               "random_sampling": {
  4795                "value": 1
  4796               },
  4797               "overall_sampling": {
  4798                "value": 100
  4799               },
  4800               "custom_tags": [
  4801                {
  4802                 "tag": "istio.authorization.dry_run.allow_policy.name",
  4803                 "metadata": {
  4804                  "kind": {
  4805                   "request": {}
  4806                  },
  4807                  "metadata_key": {
  4808                   "key": "envoy.filters.http.rbac",
  4809                   "path": [
  4810                    {
  4811                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  4812                    }
  4813                   ]
  4814                  }
  4815                 }
  4816                },
  4817                {
  4818                 "tag": "istio.authorization.dry_run.allow_policy.result",
  4819                 "metadata": {
  4820                  "kind": {
  4821                   "request": {}
  4822                  },
  4823                  "metadata_key": {
  4824                   "key": "envoy.filters.http.rbac",
  4825                   "path": [
  4826                    {
  4827                     "key": "istio_dry_run_allow_shadow_engine_result"
  4828                    }
  4829                   ]
  4830                  }
  4831                 }
  4832                },
  4833                {
  4834                 "tag": "istio.authorization.dry_run.deny_policy.name",
  4835                 "metadata": {
  4836                  "kind": {
  4837                   "request": {}
  4838                  },
  4839                  "metadata_key": {
  4840                   "key": "envoy.filters.http.rbac",
  4841                   "path": [
  4842                    {
  4843                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  4844                    }
  4845                   ]
  4846                  }
  4847                 }
  4848                },
  4849                {
  4850                 "tag": "istio.authorization.dry_run.deny_policy.result",
  4851                 "metadata": {
  4852                  "kind": {
  4853                   "request": {}
  4854                  },
  4855                  "metadata_key": {
  4856                   "key": "envoy.filters.http.rbac",
  4857                   "path": [
  4858                    {
  4859                     "key": "istio_dry_run_deny_shadow_engine_result"
  4860                    }
  4861                   ]
  4862                  }
  4863                 }
  4864                },
  4865                {
  4866                 "tag": "istio.canonical_revision",
  4867                 "literal": {
  4868                  "value": "v1"
  4869                 }
  4870                },
  4871                {
  4872                 "tag": "istio.canonical_service",
  4873                 "literal": {
  4874                  "value": "httpbin"
  4875                 }
  4876                },
  4877                {
  4878                 "tag": "istio.mesh_id",
  4879                 "literal": {
  4880                  "value": "cluster.local"
  4881                 }
  4882                },
  4883                {
  4884                 "tag": "istio.namespace",
  4885                 "literal": {
  4886                  "value": "default"
  4887                 }
  4888                }
  4889               ]
  4890              },
  4891              "server_name": "istio-envoy",
  4892              "use_remote_address": false,
  4893              "forward_client_cert_details": "APPEND_FORWARD",
  4894              "set_current_client_cert_details": {
  4895               "subject": true,
  4896               "dns": true,
  4897               "uri": true
  4898              },
  4899              "upgrade_configs": [
  4900               {
  4901                "upgrade_type": "websocket"
  4902               }
  4903              ],
  4904              "stream_idle_timeout": "0s",
  4905              "normalize_path": true,
  4906              "request_id_extension": {
  4907               "typed_config": {
  4908                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  4909                "use_request_id_for_trace_sampling": true
  4910               }
  4911              },
  4912              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  4913             }
  4914            }
  4915           ],
  4916           "name": "virtualInbound-catchall-http"
  4917          },
  4918          {
  4919           "filter_chain_match": {
  4920            "prefix_ranges": [
  4921             {
  4922              "address_prefix": "0.0.0.0",
  4923              "prefix_len": 0
  4924             }
  4925            ],
  4926            "transport_protocol": "tls",
  4927            "application_protocols": [
  4928             "istio-peer-exchange",
  4929             "istio"
  4930            ]
  4931           },
  4932           "filters": [
  4933            {
  4934             "name": "istio_authn",
  4935             "typed_config": {
  4936              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  4937              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  4938             }
  4939            },
  4940            {
  4941             "name": "istio.metadata_exchange",
  4942             "typed_config": {
  4943              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  4944              "protocol": "istio-peer-exchange"
  4945             }
  4946            },
  4947            {
  4948             "name": "envoy.filters.network.rbac",
  4949             "typed_config": {
  4950              "@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
  4951              "rules": {},
  4952              "stat_prefix": "tcp.",
  4953              "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  4954             }
  4955            },
  4956            {
  4957             "name": "istio.stats",
  4958             "typed_config": {
  4959              "@type": "type.googleapis.com/stats.PluginConfig",
  4960              "disable_host_header_fallback": true
  4961             }
  4962            },
  4963            {
  4964             "name": "envoy.filters.network.tcp_proxy",
  4965             "typed_config": {
  4966              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  4967              "stat_prefix": "InboundPassthroughClusterIpv4",
  4968              "cluster": "InboundPassthroughClusterIpv4"
  4969             }
  4970            }
  4971           ],
  4972           "transport_socket": {
  4973            "name": "envoy.transport_sockets.tls",
  4974            "typed_config": {
  4975             "@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
  4976             "common_tls_context": {
  4977              "tls_params": {
  4978               "tls_minimum_protocol_version": "TLSv1_2",
  4979               "tls_maximum_protocol_version": "TLSv1_3",
  4980               "cipher_suites": [
  4981                "ECDHE-ECDSA-AES256-GCM-SHA384",
  4982                "ECDHE-RSA-AES256-GCM-SHA384",
  4983                "ECDHE-ECDSA-AES128-GCM-SHA256",
  4984                "ECDHE-RSA-AES128-GCM-SHA256",
  4985                "AES256-GCM-SHA384",
  4986                "AES128-GCM-SHA256"
  4987               ]
  4988              },
  4989              "alpn_protocols": [
  4990               "istio-peer-exchange",
  4991               "h2",
  4992               "http/1.1"
  4993              ],
  4994              "tls_certificate_sds_secret_configs": [
  4995               {
  4996                "name": "default",
  4997                "sds_config": {
  4998                 "api_config_source": {
  4999                  "api_type": "GRPC",
  5000                  "grpc_services": [
  5001                   {
  5002                    "envoy_grpc": {
  5003                     "cluster_name": "sds-grpc"
  5004                    }
  5005                   }
  5006                  ],
  5007                  "set_node_on_first_message_only": true,
  5008                  "transport_api_version": "V3"
  5009                 },
  5010                 "initial_fetch_timeout": "0s",
  5011                 "resource_api_version": "V3"
  5012                }
  5013               }
  5014              ],
  5015              "combined_validation_context": {
  5016               "default_validation_context": {
  5017                "match_subject_alt_names": [
  5018                 {
  5019                  "prefix": "spiffe://cluster.local/"
  5020                 }
  5021                ]
  5022               },
  5023               "validation_context_sds_secret_config": {
  5024                "name": "ROOTCA",
  5025                "sds_config": {
  5026                 "api_config_source": {
  5027                  "api_type": "GRPC",
  5028                  "grpc_services": [
  5029                   {
  5030                    "envoy_grpc": {
  5031                     "cluster_name": "sds-grpc"
  5032                    }
  5033                   }
  5034                  ],
  5035                  "set_node_on_first_message_only": true,
  5036                  "transport_api_version": "V3"
  5037                 },
  5038                 "initial_fetch_timeout": "0s",
  5039                 "resource_api_version": "V3"
  5040                }
  5041               }
  5042              }
  5043             },
  5044             "require_client_certificate": true
  5045            }
  5046           },
  5047           "name": "virtualInbound"
  5048          },
  5049          {
  5050           "filter_chain_match": {
  5051            "prefix_ranges": [
  5052             {
  5053              "address_prefix": "0.0.0.0",
  5054              "prefix_len": 0
  5055             }
  5056            ],
  5057            "transport_protocol": "raw_buffer"
  5058           },
  5059           "filters": [
  5060            {
  5061             "name": "istio_authn",
  5062             "typed_config": {
  5063              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  5064              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  5065             }
  5066            },
  5067            {
  5068             "name": "istio.metadata_exchange",
  5069             "typed_config": {
  5070              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  5071              "protocol": "istio-peer-exchange"
  5072             }
  5073            },
  5074            {
  5075             "name": "envoy.filters.network.rbac",
  5076             "typed_config": {
  5077              "@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
  5078              "rules": {},
  5079              "stat_prefix": "tcp.",
  5080              "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  5081             }
  5082            },
  5083            {
  5084             "name": "istio.stats",
  5085             "typed_config": {
  5086              "@type": "type.googleapis.com/stats.PluginConfig",
  5087              "disable_host_header_fallback": true
  5088             }
  5089            },
  5090            {
  5091             "name": "envoy.filters.network.tcp_proxy",
  5092             "typed_config": {
  5093              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  5094              "stat_prefix": "InboundPassthroughClusterIpv4",
  5095              "cluster": "InboundPassthroughClusterIpv4"
  5096             }
  5097            }
  5098           ],
  5099           "name": "virtualInbound"
  5100          },
  5101          {
  5102           "filter_chain_match": {
  5103            "prefix_ranges": [
  5104             {
  5105              "address_prefix": "0.0.0.0",
  5106              "prefix_len": 0
  5107             }
  5108            ],
  5109            "transport_protocol": "tls"
  5110           },
  5111           "filters": [
  5112            {
  5113             "name": "istio_authn",
  5114             "typed_config": {
  5115              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  5116              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  5117             }
  5118            },
  5119            {
  5120             "name": "istio.metadata_exchange",
  5121             "typed_config": {
  5122              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  5123              "protocol": "istio-peer-exchange"
  5124             }
  5125            },
  5126            {
  5127             "name": "envoy.filters.network.rbac",
  5128             "typed_config": {
  5129              "@type": "type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC",
  5130              "rules": {},
  5131              "stat_prefix": "tcp.",
  5132              "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  5133             }
  5134            },
  5135            {
  5136             "name": "istio.stats",
  5137             "typed_config": {
  5138              "@type": "type.googleapis.com/stats.PluginConfig",
  5139              "disable_host_header_fallback": true
  5140             }
  5141            },
  5142            {
  5143             "name": "envoy.filters.network.tcp_proxy",
  5144             "typed_config": {
  5145              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  5146              "stat_prefix": "InboundPassthroughClusterIpv4",
  5147              "cluster": "InboundPassthroughClusterIpv4"
  5148             }
  5149            }
  5150           ],
  5151           "name": "virtualInbound"
  5152          },
  5153          {
  5154           "filter_chain_match": {
  5155            "destination_port": 80,
  5156            "transport_protocol": "tls",
  5157            "application_protocols": [
  5158             "istio",
  5159             "istio-peer-exchange",
  5160             "istio-http/1.0",
  5161             "istio-http/1.1",
  5162             "istio-h2"
  5163            ]
  5164           },
  5165           "filters": [
  5166            {
  5167             "name": "istio_authn",
  5168             "typed_config": {
  5169              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  5170              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  5171             }
  5172            },
  5173            {
  5174             "name": "istio.metadata_exchange",
  5175             "typed_config": {
  5176              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  5177              "protocol": "istio-peer-exchange"
  5178             }
  5179            },
  5180            {
  5181             "name": "envoy.filters.network.http_connection_manager",
  5182             "typed_config": {
  5183              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  5184              "stat_prefix": "inbound_0.0.0.0_80",
  5185              "route_config": {
  5186               "name": "inbound|80||",
  5187               "virtual_hosts": [
  5188                {
  5189                 "name": "inbound|http|8000",
  5190                 "domains": [
  5191                  "*"
  5192                 ],
  5193                 "routes": [
  5194                  {
  5195                   "match": {
  5196                    "prefix": "/"
  5197                   },
  5198                   "route": {
  5199                    "cluster": "inbound|80||",
  5200                    "timeout": "0s",
  5201                    "max_stream_duration": {
  5202                     "max_stream_duration": "0s",
  5203                     "grpc_timeout_header_max": "0s"
  5204                    }
  5205                   },
  5206                   "decorator": {
  5207                    "operation": "httpbin.default.svc.cluster.local:8000/*"
  5208                   },
  5209                   "name": "default"
  5210                  }
  5211                 ]
  5212                }
  5213               ],
  5214               "validate_clusters": false
  5215              },
  5216              "http_filters": [
  5217               {
  5218                "name": "istio.metadata_exchange",
  5219                "typed_config": {
  5220                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  5221                 "config": {
  5222                  "vm_config": {
  5223                   "runtime": "envoy.wasm.runtime.null",
  5224                   "code": {
  5225                    "local": {
  5226                     "inline_string": "envoy.wasm.metadata_exchange"
  5227                    }
  5228                   }
  5229                  },
  5230                  "configuration": {
  5231                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  5232                  }
  5233                 }
  5234                }
  5235               },
  5236               {
  5237                "name": "envoy.filters.http.rbac",
  5238                "typed_config": {
  5239                 "@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
  5240                 "rules": {
  5241                  "policies": {
  5242                   "ns[default]-policy[httpbin]-rule[0]": {
  5243                    "permissions": [
  5244                     {
  5245                      "and_rules": {
  5246                       "rules": [
  5247                        {
  5248                         "or_rules": {
  5249                          "rules": [
  5250                           {
  5251                            "header": {
  5252                             "name": ":method",
  5253                             "exact_match": "GET"
  5254                            }
  5255                           }
  5256                          ]
  5257                         }
  5258                        },
  5259                        {
  5260                         "or_rules": {
  5261                          "rules": [
  5262                           {
  5263                            "url_path": {
  5264                             "path": {
  5265                              "prefix": "/info"
  5266                             }
  5267                            }
  5268                           }
  5269                          ]
  5270                         }
  5271                        }
  5272                       ]
  5273                      }
  5274                     },
  5275                     {
  5276                      "and_rules": {
  5277                       "rules": [
  5278                        {
  5279                         "or_rules": {
  5280                          "rules": [
  5281                           {
  5282                            "header": {
  5283                             "name": ":method",
  5284                             "exact_match": "POST"
  5285                            }
  5286                           }
  5287                          ]
  5288                         }
  5289                        },
  5290                        {
  5291                         "or_rules": {
  5292                          "rules": [
  5293                           {
  5294                            "url_path": {
  5295                             "path": {
  5296                              "exact": "/data"
  5297                             }
  5298                            }
  5299                           }
  5300                          ]
  5301                         }
  5302                        }
  5303                       ]
  5304                      }
  5305                     }
  5306                    ],
  5307                    "principals": [
  5308                     {
  5309                      "and_ids": {
  5310                       "ids": [
  5311                        {
  5312                         "or_ids": {
  5313                          "ids": [
  5314                           {
  5315                            "filter_state": {
  5316                             "key": "io.istio.peer_principal",
  5317                             "string_match": {
  5318                              "exact": "spiffe://cluster.local/ns/default/sa/sleep"
  5319                             }
  5320                            }
  5321                           }
  5322                          ]
  5323                         }
  5324                        },
  5325                        {
  5326                         "or_ids": {
  5327                          "ids": [
  5328                           {
  5329                            "metadata": {
  5330                             "filter": "istio_authn",
  5331                             "path": [
  5332                              {
  5333                               "key": "request.auth.claims"
  5334                              },
  5335                              {
  5336                               "key": "iss"
  5337                              }
  5338                             ],
  5339                             "value": {
  5340                              "list_match": {
  5341                               "one_of": {
  5342                                "string_match": {
  5343                                 "exact": "https://accounts.google.com"
  5344                                }
  5345                               }
  5346                              }
  5347                             }
  5348                            }
  5349                           }
  5350                          ]
  5351                         }
  5352                        }
  5353                       ]
  5354                      }
  5355                     },
  5356                     {
  5357                      "and_ids": {
  5358                       "ids": [
  5359                        {
  5360                         "or_ids": {
  5361                          "ids": [
  5362                           {
  5363                            "filter_state": {
  5364                             "key": "io.istio.peer_principal",
  5365                             "string_match": {
  5366                              "safe_regex": {
  5367                               "regex": ".*/ns/test/.*"
  5368                              }
  5369                             }
  5370                            }
  5371                           }
  5372                          ]
  5373                         }
  5374                        },
  5375                        {
  5376                         "or_ids": {
  5377                          "ids": [
  5378                           {
  5379                            "metadata": {
  5380                             "filter": "istio_authn",
  5381                             "path": [
  5382                              {
  5383                               "key": "request.auth.claims"
  5384                              },
  5385                              {
  5386                               "key": "iss"
  5387                              }
  5388                             ],
  5389                             "value": {
  5390                              "list_match": {
  5391                               "one_of": {
  5392                                "string_match": {
  5393                                 "exact": "https://accounts.google.com"
  5394                                }
  5395                               }
  5396                              }
  5397                             }
  5398                            }
  5399                           }
  5400                          ]
  5401                         }
  5402                        }
  5403                       ]
  5404                      }
  5405                     }
  5406                    ]
  5407                   }
  5408                  }
  5409                 },
  5410                 "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  5411                }
  5412               },
  5413               {
  5414                "name": "envoy.filters.http.grpc_stats",
  5415                "typed_config": {
  5416                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  5417                 "emit_filter_state": true,
  5418                 "stats_for_all_methods": false
  5419                }
  5420               },
  5421               {
  5422                "name": "envoy.filters.http.fault",
  5423                "typed_config": {
  5424                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  5425                }
  5426               },
  5427               {
  5428                "name": "envoy.filters.http.cors",
  5429                "typed_config": {
  5430                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  5431                }
  5432               },
  5433               {
  5434                "name": "istio.stats",
  5435                "typed_config": {
  5436                 "@type": "type.googleapis.com/stats.PluginConfig",
  5437                 "disable_host_header_fallback": true
  5438                }
  5439               },
  5440               {
  5441                "name": "envoy.filters.http.router",
  5442                "typed_config": {
  5443                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  5444                }
  5445               }
  5446              ],
  5447              "tracing": {
  5448               "client_sampling": {
  5449                "value": 100
  5450               },
  5451               "random_sampling": {
  5452                "value": 1
  5453               },
  5454               "overall_sampling": {
  5455                "value": 100
  5456               },
  5457               "custom_tags": [
  5458                {
  5459                 "tag": "istio.authorization.dry_run.allow_policy.name",
  5460                 "metadata": {
  5461                  "kind": {
  5462                   "request": {}
  5463                  },
  5464                  "metadata_key": {
  5465                   "key": "envoy.filters.http.rbac",
  5466                   "path": [
  5467                    {
  5468                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  5469                    }
  5470                   ]
  5471                  }
  5472                 }
  5473                },
  5474                {
  5475                 "tag": "istio.authorization.dry_run.allow_policy.result",
  5476                 "metadata": {
  5477                  "kind": {
  5478                   "request": {}
  5479                  },
  5480                  "metadata_key": {
  5481                   "key": "envoy.filters.http.rbac",
  5482                   "path": [
  5483                    {
  5484                     "key": "istio_dry_run_allow_shadow_engine_result"
  5485                    }
  5486                   ]
  5487                  }
  5488                 }
  5489                },
  5490                {
  5491                 "tag": "istio.authorization.dry_run.deny_policy.name",
  5492                 "metadata": {
  5493                  "kind": {
  5494                   "request": {}
  5495                  },
  5496                  "metadata_key": {
  5497                   "key": "envoy.filters.http.rbac",
  5498                   "path": [
  5499                    {
  5500                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  5501                    }
  5502                   ]
  5503                  }
  5504                 }
  5505                },
  5506                {
  5507                 "tag": "istio.authorization.dry_run.deny_policy.result",
  5508                 "metadata": {
  5509                  "kind": {
  5510                   "request": {}
  5511                  },
  5512                  "metadata_key": {
  5513                   "key": "envoy.filters.http.rbac",
  5514                   "path": [
  5515                    {
  5516                     "key": "istio_dry_run_deny_shadow_engine_result"
  5517                    }
  5518                   ]
  5519                  }
  5520                 }
  5521                },
  5522                {
  5523                 "tag": "istio.canonical_revision",
  5524                 "literal": {
  5525                  "value": "v1"
  5526                 }
  5527                },
  5528                {
  5529                 "tag": "istio.canonical_service",
  5530                 "literal": {
  5531                  "value": "httpbin"
  5532                 }
  5533                },
  5534                {
  5535                 "tag": "istio.mesh_id",
  5536                 "literal": {
  5537                  "value": "cluster.local"
  5538                 }
  5539                },
  5540                {
  5541                 "tag": "istio.namespace",
  5542                 "literal": {
  5543                  "value": "default"
  5544                 }
  5545                }
  5546               ]
  5547              },
  5548              "server_name": "istio-envoy",
  5549              "use_remote_address": false,
  5550              "forward_client_cert_details": "APPEND_FORWARD",
  5551              "set_current_client_cert_details": {
  5552               "subject": true,
  5553               "dns": true,
  5554               "uri": true
  5555              },
  5556              "upgrade_configs": [
  5557               {
  5558                "upgrade_type": "websocket"
  5559               }
  5560              ],
  5561              "stream_idle_timeout": "0s",
  5562              "normalize_path": true,
  5563              "request_id_extension": {
  5564               "typed_config": {
  5565                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  5566                "use_request_id_for_trace_sampling": true
  5567               }
  5568              },
  5569              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  5570             }
  5571            }
  5572           ],
  5573           "transport_socket": {
  5574            "name": "envoy.transport_sockets.tls",
  5575            "typed_config": {
  5576             "@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
  5577             "common_tls_context": {
  5578              "tls_params": {
  5579               "tls_minimum_protocol_version": "TLSv1_2",
  5580               "tls_maximum_protocol_version": "TLSv1_3",
  5581               "cipher_suites": [
  5582                "ECDHE-ECDSA-AES256-GCM-SHA384",
  5583                "ECDHE-RSA-AES256-GCM-SHA384",
  5584                "ECDHE-ECDSA-AES128-GCM-SHA256",
  5585                "ECDHE-RSA-AES128-GCM-SHA256",
  5586                "AES256-GCM-SHA384",
  5587                "AES128-GCM-SHA256"
  5588               ]
  5589              },
  5590              "alpn_protocols": [
  5591               "h2",
  5592               "http/1.1"
  5593              ],
  5594              "tls_certificate_sds_secret_configs": [
  5595               {
  5596                "name": "default",
  5597                "sds_config": {
  5598                 "api_config_source": {
  5599                  "api_type": "GRPC",
  5600                  "grpc_services": [
  5601                   {
  5602                    "envoy_grpc": {
  5603                     "cluster_name": "sds-grpc"
  5604                    }
  5605                   }
  5606                  ],
  5607                  "set_node_on_first_message_only": true,
  5608                  "transport_api_version": "V3"
  5609                 },
  5610                 "initial_fetch_timeout": "0s",
  5611                 "resource_api_version": "V3"
  5612                }
  5613               }
  5614              ],
  5615              "combined_validation_context": {
  5616               "default_validation_context": {
  5617                "match_subject_alt_names": [
  5618                 {
  5619                  "prefix": "spiffe://cluster.local/"
  5620                 }
  5621                ]
  5622               },
  5623               "validation_context_sds_secret_config": {
  5624                "name": "ROOTCA",
  5625                "sds_config": {
  5626                 "api_config_source": {
  5627                  "api_type": "GRPC",
  5628                  "grpc_services": [
  5629                   {
  5630                    "envoy_grpc": {
  5631                     "cluster_name": "sds-grpc"
  5632                    }
  5633                   }
  5634                  ],
  5635                  "set_node_on_first_message_only": true,
  5636                  "transport_api_version": "V3"
  5637                 },
  5638                 "initial_fetch_timeout": "0s",
  5639                 "resource_api_version": "V3"
  5640                }
  5641               }
  5642              }
  5643             },
  5644             "require_client_certificate": true
  5645            }
  5646           },
  5647           "name": "0.0.0.0_80"
  5648          },
  5649          {
  5650           "filter_chain_match": {
  5651            "destination_port": 80,
  5652            "transport_protocol": "raw_buffer"
  5653           },
  5654           "filters": [
  5655            {
  5656             "name": "istio_authn",
  5657             "typed_config": {
  5658              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  5659              "type_url": "type.googleapis.com/io.istio.network.authn.Config"
  5660             }
  5661            },
  5662            {
  5663             "name": "istio.metadata_exchange",
  5664             "typed_config": {
  5665              "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange",
  5666              "protocol": "istio-peer-exchange"
  5667             }
  5668            },
  5669            {
  5670             "name": "envoy.filters.network.http_connection_manager",
  5671             "typed_config": {
  5672              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  5673              "stat_prefix": "inbound_0.0.0.0_80",
  5674              "route_config": {
  5675               "name": "inbound|80||",
  5676               "virtual_hosts": [
  5677                {
  5678                 "name": "inbound|http|8000",
  5679                 "domains": [
  5680                  "*"
  5681                 ],
  5682                 "routes": [
  5683                  {
  5684                   "match": {
  5685                    "prefix": "/"
  5686                   },
  5687                   "route": {
  5688                    "cluster": "inbound|80||",
  5689                    "timeout": "0s",
  5690                    "max_stream_duration": {
  5691                     "max_stream_duration": "0s",
  5692                     "grpc_timeout_header_max": "0s"
  5693                    }
  5694                   },
  5695                   "decorator": {
  5696                    "operation": "httpbin.default.svc.cluster.local:8000/*"
  5697                   },
  5698                   "name": "default"
  5699                  }
  5700                 ]
  5701                }
  5702               ],
  5703               "validate_clusters": false
  5704              },
  5705              "http_filters": [
  5706               {
  5707                "name": "istio.metadata_exchange",
  5708                "typed_config": {
  5709                 "@type": "type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm",
  5710                 "config": {
  5711                  "vm_config": {
  5712                   "runtime": "envoy.wasm.runtime.null",
  5713                   "code": {
  5714                    "local": {
  5715                     "inline_string": "envoy.wasm.metadata_exchange"
  5716                    }
  5717                   }
  5718                  },
  5719                  "configuration": {
  5720                   "@type": "type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange"
  5721                  }
  5722                 }
  5723                }
  5724               },
  5725               {
  5726                "name": "envoy.filters.http.rbac",
  5727                "typed_config": {
  5728                 "@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
  5729                 "rules": {
  5730                  "policies": {
  5731                   "ns[default]-policy[httpbin]-rule[0]": {
  5732                    "permissions": [
  5733                     {
  5734                      "and_rules": {
  5735                       "rules": [
  5736                        {
  5737                         "or_rules": {
  5738                          "rules": [
  5739                           {
  5740                            "header": {
  5741                             "name": ":method",
  5742                             "exact_match": "GET"
  5743                            }
  5744                           }
  5745                          ]
  5746                         }
  5747                        },
  5748                        {
  5749                         "or_rules": {
  5750                          "rules": [
  5751                           {
  5752                            "url_path": {
  5753                             "path": {
  5754                              "prefix": "/info"
  5755                             }
  5756                            }
  5757                           }
  5758                          ]
  5759                         }
  5760                        }
  5761                       ]
  5762                      }
  5763                     },
  5764                     {
  5765                      "and_rules": {
  5766                       "rules": [
  5767                        {
  5768                         "or_rules": {
  5769                          "rules": [
  5770                           {
  5771                            "header": {
  5772                             "name": ":method",
  5773                             "exact_match": "POST"
  5774                            }
  5775                           }
  5776                          ]
  5777                         }
  5778                        },
  5779                        {
  5780                         "or_rules": {
  5781                          "rules": [
  5782                           {
  5783                            "url_path": {
  5784                             "path": {
  5785                              "exact": "/data"
  5786                             }
  5787                            }
  5788                           }
  5789                          ]
  5790                         }
  5791                        }
  5792                       ]
  5793                      }
  5794                     }
  5795                    ],
  5796                    "principals": [
  5797                     {
  5798                      "and_ids": {
  5799                       "ids": [
  5800                        {
  5801                         "or_ids": {
  5802                          "ids": [
  5803                           {
  5804                            "filter_state": {
  5805                             "key": "io.istio.peer_principal",
  5806                             "string_match": {
  5807                              "exact": "spiffe://cluster.local/ns/default/sa/sleep"
  5808                             }
  5809                            }
  5810                           }
  5811                          ]
  5812                         }
  5813                        },
  5814                        {
  5815                         "or_ids": {
  5816                          "ids": [
  5817                           {
  5818                            "metadata": {
  5819                             "filter": "istio_authn",
  5820                             "path": [
  5821                              {
  5822                               "key": "request.auth.claims"
  5823                              },
  5824                              {
  5825                               "key": "iss"
  5826                              }
  5827                             ],
  5828                             "value": {
  5829                              "list_match": {
  5830                               "one_of": {
  5831                                "string_match": {
  5832                                 "exact": "https://accounts.google.com"
  5833                                }
  5834                               }
  5835                              }
  5836                             }
  5837                            }
  5838                           }
  5839                          ]
  5840                         }
  5841                        }
  5842                       ]
  5843                      }
  5844                     },
  5845                     {
  5846                      "and_ids": {
  5847                       "ids": [
  5848                        {
  5849                         "or_ids": {
  5850                          "ids": [
  5851                           {
  5852                            "filter_state": {
  5853                             "key": "io.istio.peer_principal",
  5854                             "string_match": {
  5855                              "safe_regex": {
  5856                               "regex": ".*/ns/test/.*"
  5857                              }
  5858                             }
  5859                            }
  5860                           }
  5861                          ]
  5862                         }
  5863                        },
  5864                        {
  5865                         "or_ids": {
  5866                          "ids": [
  5867                           {
  5868                            "metadata": {
  5869                             "filter": "istio_authn",
  5870                             "path": [
  5871                              {
  5872                               "key": "request.auth.claims"
  5873                              },
  5874                              {
  5875                               "key": "iss"
  5876                              }
  5877                             ],
  5878                             "value": {
  5879                              "list_match": {
  5880                               "one_of": {
  5881                                "string_match": {
  5882                                 "exact": "https://accounts.google.com"
  5883                                }
  5884                               }
  5885                              }
  5886                             }
  5887                            }
  5888                           }
  5889                          ]
  5890                         }
  5891                        }
  5892                       ]
  5893                      }
  5894                     }
  5895                    ]
  5896                   }
  5897                  }
  5898                 },
  5899                 "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  5900                }
  5901               },
  5902               {
  5903                "name": "envoy.filters.http.grpc_stats",
  5904                "typed_config": {
  5905                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  5906                 "emit_filter_state": true,
  5907                 "stats_for_all_methods": false
  5908                }
  5909               },
  5910               {
  5911                "name": "envoy.filters.http.fault",
  5912                "typed_config": {
  5913                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  5914                }
  5915               },
  5916               {
  5917                "name": "envoy.filters.http.cors",
  5918                "typed_config": {
  5919                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  5920                }
  5921               },
  5922               {
  5923                "name": "istio.stats",
  5924                "typed_config": {
  5925                 "@type": "type.googleapis.com/stats.PluginConfig",
  5926                 "disable_host_header_fallback": true
  5927                }
  5928               },
  5929               {
  5930                "name": "envoy.filters.http.router",
  5931                "typed_config": {
  5932                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  5933                }
  5934               }
  5935              ],
  5936              "tracing": {
  5937               "client_sampling": {
  5938                "value": 100
  5939               },
  5940               "random_sampling": {
  5941                "value": 1
  5942               },
  5943               "overall_sampling": {
  5944                "value": 100
  5945               },
  5946               "custom_tags": [
  5947                {
  5948                 "tag": "istio.authorization.dry_run.allow_policy.name",
  5949                 "metadata": {
  5950                  "kind": {
  5951                   "request": {}
  5952                  },
  5953                  "metadata_key": {
  5954                   "key": "envoy.filters.http.rbac",
  5955                   "path": [
  5956                    {
  5957                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  5958                    }
  5959                   ]
  5960                  }
  5961                 }
  5962                },
  5963                {
  5964                 "tag": "istio.authorization.dry_run.allow_policy.result",
  5965                 "metadata": {
  5966                  "kind": {
  5967                   "request": {}
  5968                  },
  5969                  "metadata_key": {
  5970                   "key": "envoy.filters.http.rbac",
  5971                   "path": [
  5972                    {
  5973                     "key": "istio_dry_run_allow_shadow_engine_result"
  5974                    }
  5975                   ]
  5976                  }
  5977                 }
  5978                },
  5979                {
  5980                 "tag": "istio.authorization.dry_run.deny_policy.name",
  5981                 "metadata": {
  5982                  "kind": {
  5983                   "request": {}
  5984                  },
  5985                  "metadata_key": {
  5986                   "key": "envoy.filters.http.rbac",
  5987                   "path": [
  5988                    {
  5989                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  5990                    }
  5991                   ]
  5992                  }
  5993                 }
  5994                },
  5995                {
  5996                 "tag": "istio.authorization.dry_run.deny_policy.result",
  5997                 "metadata": {
  5998                  "kind": {
  5999                   "request": {}
  6000                  },
  6001                  "metadata_key": {
  6002                   "key": "envoy.filters.http.rbac",
  6003                   "path": [
  6004                    {
  6005                     "key": "istio_dry_run_deny_shadow_engine_result"
  6006                    }
  6007                   ]
  6008                  }
  6009                 }
  6010                },
  6011                {
  6012                 "tag": "istio.canonical_revision",
  6013                 "literal": {
  6014                  "value": "v1"
  6015                 }
  6016                },
  6017                {
  6018                 "tag": "istio.canonical_service",
  6019                 "literal": {
  6020                  "value": "httpbin"
  6021                 }
  6022                },
  6023                {
  6024                 "tag": "istio.mesh_id",
  6025                 "literal": {
  6026                  "value": "cluster.local"
  6027                 }
  6028                },
  6029                {
  6030                 "tag": "istio.namespace",
  6031                 "literal": {
  6032                  "value": "default"
  6033                 }
  6034                }
  6035               ]
  6036              },
  6037              "server_name": "istio-envoy",
  6038              "use_remote_address": false,
  6039              "forward_client_cert_details": "APPEND_FORWARD",
  6040              "set_current_client_cert_details": {
  6041               "subject": true,
  6042               "dns": true,
  6043               "uri": true
  6044              },
  6045              "upgrade_configs": [
  6046               {
  6047                "upgrade_type": "websocket"
  6048               }
  6049              ],
  6050              "stream_idle_timeout": "0s",
  6051              "normalize_path": true,
  6052              "request_id_extension": {
  6053               "typed_config": {
  6054                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  6055                "use_request_id_for_trace_sampling": true
  6056               }
  6057              },
  6058              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  6059             }
  6060            }
  6061           ],
  6062           "name": "0.0.0.0_80"
  6063          }
  6064         ],
  6065         "listener_filters": [
  6066          {
  6067           "name": "envoy.filters.listener.original_dst",
  6068           "typed_config": {
  6069            "@type": "type.googleapis.com/envoy.extensions.filters.listener.original_dst.v3.OriginalDst"
  6070           }
  6071          },
  6072          {
  6073           "name": "envoy.filters.listener.tls_inspector",
  6074           "typed_config": {
  6075            "@type": "type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector"
  6076           },
  6077           "filter_disabled": {
  6078            "destination_port_range": {
  6079             "start": 15006,
  6080             "end": 15007
  6081            }
  6082           }
  6083          },
  6084          {
  6085           "name": "envoy.filters.listener.http_inspector",
  6086           "typed_config": {
  6087            "@type": "type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector"
  6088           },
  6089           "filter_disabled": {
  6090            "or_match": {
  6091             "rules": [
  6092              {
  6093               "destination_port_range": {
  6094                "start": 80,
  6095                "end": 81
  6096               }
  6097              },
  6098              {
  6099               "destination_port_range": {
  6100                "start": 15006,
  6101                "end": 15007
  6102               }
  6103              }
  6104             ]
  6105            }
  6106           }
  6107          }
  6108         ],
  6109         "listener_filters_timeout": "0s",
  6110         "traffic_direction": "INBOUND",
  6111         "continue_on_listener_filters_timeout": true
  6112        },
  6113        "last_updated": "2023-06-20T09:08:58.887Z"
  6114       }
  6115      },
  6116      {
  6117       "name": "connect_terminate",
  6118       "active_state": {
  6119        "version_info": "2023-06-20T09:07:41Z/3",
  6120        "listener": {
  6121         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  6122         "name": "connect_terminate",
  6123         "address": {
  6124          "socket_address": {
  6125           "address": "0.0.0.0",
  6126           "port_value": 15008
  6127          }
  6128         },
  6129         "filter_chains": [
  6130          {
  6131           "filters": [
  6132            {
  6133             "name": "istio_authn",
  6134             "typed_config": {
  6135              "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  6136              "type_url": "type.googleapis.com/io.istio.network.authn.Config",
  6137              "value": {
  6138               "shared": true
  6139              }
  6140             }
  6141            },
  6142            {
  6143             "name": "envoy.filters.network.http_connection_manager",
  6144             "typed_config": {
  6145              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  6146              "stat_prefix": "connect_terminate",
  6147              "route_config": {
  6148               "name": "default",
  6149               "virtual_hosts": [
  6150                {
  6151                 "name": "default",
  6152                 "domains": [
  6153                  "*"
  6154                 ],
  6155                 "routes": [
  6156                  {
  6157                   "match": {
  6158                    "connect_matcher": {}
  6159                   },
  6160                   "route": {
  6161                    "cluster": "main_internal",
  6162                    "upgrade_configs": [
  6163                     {
  6164                      "upgrade_type": "CONNECT",
  6165                      "connect_config": {}
  6166                     }
  6167                    ]
  6168                   },
  6169                   "typed_per_filter_config": {
  6170                    "connect_authority": {
  6171                     "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  6172                     "type_url": "type.googleapis.com/io.istio.http.connect_authority.Config",
  6173                     "value": {
  6174                      "enabled": true
  6175                     }
  6176                    }
  6177                   }
  6178                  }
  6179                 ]
  6180                }
  6181               ]
  6182              },
  6183              "http_filters": [
  6184               {
  6185                "name": "connect_baggage",
  6186                "typed_config": {
  6187                 "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  6188                 "type_url": "type.googleapis.com/io.istio.http.connect_baggage.Config"
  6189                }
  6190               },
  6191               {
  6192                "name": "connect_authority",
  6193                "typed_config": {
  6194                 "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  6195                 "type_url": "type.googleapis.com/io.istio.http.connect_authority.Config"
  6196                }
  6197               },
  6198               {
  6199                "name": "envoy.filters.http.router",
  6200                "typed_config": {
  6201                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  6202                }
  6203               }
  6204              ],
  6205              "http2_protocol_options": {
  6206               "max_concurrent_streams": 100,
  6207               "allow_connect": true
  6208              },
  6209              "server_name": "waypoint-envoy",
  6210              "use_remote_address": false,
  6211              "forward_client_cert_details": "APPEND_FORWARD",
  6212              "set_current_client_cert_details": {
  6213               "subject": true,
  6214               "dns": true,
  6215               "uri": true
  6216              },
  6217              "upgrade_configs": [
  6218               {
  6219                "upgrade_type": "CONNECT"
  6220               }
  6221              ],
  6222              "stream_idle_timeout": "0s"
  6223             }
  6224            }
  6225           ],
  6226           "transport_socket": {
  6227            "name": "tls",
  6228            "typed_config": {
  6229             "@type": "type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext",
  6230             "common_tls_context": {
  6231              "tls_params": {
  6232               "tls_minimum_protocol_version": "TLSv1_3",
  6233               "tls_maximum_protocol_version": "TLSv1_3"
  6234              },
  6235              "alpn_protocols": [
  6236               "h2"
  6237              ],
  6238              "tls_certificate_sds_secret_configs": [
  6239               {
  6240                "name": "default",
  6241                "sds_config": {
  6242                 "api_config_source": {
  6243                  "api_type": "GRPC",
  6244                  "grpc_services": [
  6245                   {
  6246                    "envoy_grpc": {
  6247                     "cluster_name": "sds-grpc"
  6248                    }
  6249                   }
  6250                  ],
  6251                  "set_node_on_first_message_only": true,
  6252                  "transport_api_version": "V3"
  6253                 },
  6254                 "initial_fetch_timeout": "0s",
  6255                 "resource_api_version": "V3"
  6256                }
  6257               }
  6258              ],
  6259              "combined_validation_context": {
  6260               "default_validation_context": {
  6261                "match_typed_subject_alt_names": [
  6262                 {
  6263                  "san_type": "URI",
  6264                  "matcher": {
  6265                   "prefix": "spiffe://cluster.local/"
  6266                  }
  6267                 }
  6268                ]
  6269               },
  6270               "validation_context_sds_secret_config": {
  6271                "name": "ROOTCA",
  6272                "sds_config": {
  6273                 "api_config_source": {
  6274                  "api_type": "GRPC",
  6275                  "grpc_services": [
  6276                   {
  6277                    "envoy_grpc": {
  6278                     "cluster_name": "sds-grpc"
  6279                    }
  6280                   }
  6281                  ],
  6282                  "set_node_on_first_message_only": true,
  6283                  "transport_api_version": "V3"
  6284                 },
  6285                 "initial_fetch_timeout": "0s",
  6286                 "resource_api_version": "V3"
  6287                }
  6288               }
  6289              }
  6290             },
  6291             "require_client_certificate": true
  6292            }
  6293           },
  6294           "name": "default"
  6295          }
  6296         ]
  6297        },
  6298        "last_updated": "2023-06-20T09:07:42.038Z"
  6299       }
  6300      },
  6301      {
  6302       "name": "main_internal",
  6303       "active_state": {
  6304        "version_info": "2023-06-20T09:07:41Z/3",
  6305        "listener": {
  6306         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  6307         "name": "main_internal",
  6308         "filter_chains": [
  6309          {
  6310           "filter_chain_match": {
  6311            "destination_port": 80
  6312           },
  6313           "filters": [
  6314            {
  6315             "name": "envoy.filters.network.http_connection_manager",
  6316             "typed_config": {
  6317              "@type": "type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager",
  6318              "stat_prefix": "inbound_0.0.0.0_80",
  6319              "route_config": {
  6320               "name": "inbound|80||",
  6321               "virtual_hosts": [
  6322                {
  6323                 "name": "inbound|http|8000",
  6324                 "domains": [
  6325                  "*"
  6326                 ],
  6327                 "routes": [
  6328                  {
  6329                   "match": {
  6330                    "prefix": "/"
  6331                   },
  6332                   "route": {
  6333                    "cluster": "inbound|80||",
  6334                    "timeout": "0s",
  6335                    "max_stream_duration": {
  6336                     "max_stream_duration": "0s",
  6337                     "grpc_timeout_header_max": "0s"
  6338                    }
  6339                   },
  6340                   "decorator": {
  6341                    "operation": "httpbin.default.svc.cluster.local:8000/*"
  6342                   },
  6343                   "name": "default"
  6344                  }
  6345                 ]
  6346                }
  6347               ],
  6348               "validate_clusters": false
  6349              },
  6350              "http_filters": [
  6351               {
  6352                "name": "envoy.filters.http.rbac",
  6353                "typed_config": {
  6354                 "@type": "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
  6355                 "rules": {
  6356                  "policies": {
  6357                   "ns[default]-policy[httpbin]-rule[0]": {
  6358                    "permissions": [
  6359                     {
  6360                      "and_rules": {
  6361                       "rules": [
  6362                        {
  6363                         "or_rules": {
  6364                          "rules": [
  6365                           {
  6366                            "header": {
  6367                             "name": ":method",
  6368                             "exact_match": "GET"
  6369                            }
  6370                           }
  6371                          ]
  6372                         }
  6373                        },
  6374                        {
  6375                         "or_rules": {
  6376                          "rules": [
  6377                           {
  6378                            "url_path": {
  6379                             "path": {
  6380                              "prefix": "/info"
  6381                             }
  6382                            }
  6383                           }
  6384                          ]
  6385                         }
  6386                        }
  6387                       ]
  6388                      }
  6389                     },
  6390                     {
  6391                      "and_rules": {
  6392                       "rules": [
  6393                        {
  6394                         "or_rules": {
  6395                          "rules": [
  6396                           {
  6397                            "header": {
  6398                             "name": ":method",
  6399                             "exact_match": "POST"
  6400                            }
  6401                           }
  6402                          ]
  6403                         }
  6404                        },
  6405                        {
  6406                         "or_rules": {
  6407                          "rules": [
  6408                           {
  6409                            "url_path": {
  6410                             "path": {
  6411                              "exact": "/data"
  6412                             }
  6413                            }
  6414                           }
  6415                          ]
  6416                         }
  6417                        }
  6418                       ]
  6419                      }
  6420                     }
  6421                    ],
  6422                    "principals": [
  6423                     {
  6424                      "and_ids": {
  6425                       "ids": [
  6426                        {
  6427                         "or_ids": {
  6428                          "ids": [
  6429                           {
  6430                            "filter_state": {
  6431                             "key": "io.istio.peer_principal",
  6432                             "string_match": {
  6433                              "exact": "spiffe://cluster.local/ns/default/sa/sleep"
  6434                             }
  6435                            }
  6436                           }
  6437                          ]
  6438                         }
  6439                        },
  6440                        {
  6441                         "or_ids": {
  6442                          "ids": [
  6443                           {
  6444                            "metadata": {
  6445                             "filter": "istio_authn",
  6446                             "path": [
  6447                              {
  6448                               "key": "request.auth.claims"
  6449                              },
  6450                              {
  6451                               "key": "iss"
  6452                              }
  6453                             ],
  6454                             "value": {
  6455                              "list_match": {
  6456                               "one_of": {
  6457                                "string_match": {
  6458                                 "exact": "https://accounts.google.com"
  6459                                }
  6460                               }
  6461                              }
  6462                             }
  6463                            }
  6464                           }
  6465                          ]
  6466                         }
  6467                        }
  6468                       ]
  6469                      }
  6470                     },
  6471                     {
  6472                      "and_ids": {
  6473                       "ids": [
  6474                        {
  6475                         "or_ids": {
  6476                          "ids": [
  6477                           {
  6478                            "filter_state": {
  6479                             "key": "io.istio.peer_principal",
  6480                             "string_match": {
  6481                              "safe_regex": {
  6482                               "regex": ".*/ns/test/.*"
  6483                              }
  6484                             }
  6485                            }
  6486                           }
  6487                          ]
  6488                         }
  6489                        },
  6490                        {
  6491                         "or_ids": {
  6492                          "ids": [
  6493                           {
  6494                            "metadata": {
  6495                             "filter": "istio_authn",
  6496                             "path": [
  6497                              {
  6498                               "key": "request.auth.claims"
  6499                              },
  6500                              {
  6501                               "key": "iss"
  6502                              }
  6503                             ],
  6504                             "value": {
  6505                              "list_match": {
  6506                               "one_of": {
  6507                                "string_match": {
  6508                                 "exact": "https://accounts.google.com"
  6509                                }
  6510                               }
  6511                              }
  6512                             }
  6513                            }
  6514                           }
  6515                          ]
  6516                         }
  6517                        }
  6518                       ]
  6519                      }
  6520                     }
  6521                    ]
  6522                   }
  6523                  }
  6524                 },
  6525                 "shadow_rules_stat_prefix": "istio_dry_run_allow_"
  6526                }
  6527               },
  6528               {
  6529                "name": "envoy.filters.http.grpc_stats",
  6530                "typed_config": {
  6531                 "@type": "type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig",
  6532                 "emit_filter_state": true,
  6533                 "stats_for_all_methods": false
  6534                }
  6535               },
  6536               {
  6537                "name": "envoy.filters.http.fault",
  6538                "typed_config": {
  6539                 "@type": "type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault"
  6540                }
  6541               },
  6542               {
  6543                "name": "envoy.filters.http.cors",
  6544                "typed_config": {
  6545                 "@type": "type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors"
  6546                }
  6547               },
  6548               {
  6549                "name": "istio.stats",
  6550                "typed_config": {
  6551                 "@type": "type.googleapis.com/stats.PluginConfig",
  6552                 "disable_host_header_fallback": true
  6553                }
  6554               },
  6555               {
  6556                "name": "envoy.filters.http.router",
  6557                "typed_config": {
  6558                 "@type": "type.googleapis.com/envoy.extensions.filters.http.router.v3.Router"
  6559                }
  6560               }
  6561              ],
  6562              "tracing": {
  6563               "client_sampling": {
  6564                "value": 100
  6565               },
  6566               "random_sampling": {
  6567                "value": 1
  6568               },
  6569               "overall_sampling": {
  6570                "value": 100
  6571               },
  6572               "custom_tags": [
  6573                {
  6574                 "tag": "istio.authorization.dry_run.allow_policy.name",
  6575                 "metadata": {
  6576                  "kind": {
  6577                   "request": {}
  6578                  },
  6579                  "metadata_key": {
  6580                   "key": "envoy.filters.http.rbac",
  6581                   "path": [
  6582                    {
  6583                     "key": "istio_dry_run_allow_shadow_effective_policy_id"
  6584                    }
  6585                   ]
  6586                  }
  6587                 }
  6588                },
  6589                {
  6590                 "tag": "istio.authorization.dry_run.allow_policy.result",
  6591                 "metadata": {
  6592                  "kind": {
  6593                   "request": {}
  6594                  },
  6595                  "metadata_key": {
  6596                   "key": "envoy.filters.http.rbac",
  6597                   "path": [
  6598                    {
  6599                     "key": "istio_dry_run_allow_shadow_engine_result"
  6600                    }
  6601                   ]
  6602                  }
  6603                 }
  6604                },
  6605                {
  6606                 "tag": "istio.authorization.dry_run.deny_policy.name",
  6607                 "metadata": {
  6608                  "kind": {
  6609                   "request": {}
  6610                  },
  6611                  "metadata_key": {
  6612                   "key": "envoy.filters.http.rbac",
  6613                   "path": [
  6614                    {
  6615                     "key": "istio_dry_run_deny_shadow_effective_policy_id"
  6616                    }
  6617                   ]
  6618                  }
  6619                 }
  6620                },
  6621                {
  6622                 "tag": "istio.authorization.dry_run.deny_policy.result",
  6623                 "metadata": {
  6624                  "kind": {
  6625                   "request": {}
  6626                  },
  6627                  "metadata_key": {
  6628                   "key": "envoy.filters.http.rbac",
  6629                   "path": [
  6630                    {
  6631                     "key": "istio_dry_run_deny_shadow_engine_result"
  6632                    }
  6633                   ]
  6634                  }
  6635                 }
  6636                },
  6637                {
  6638                 "tag": "istio.canonical_revision",
  6639                 "literal": {
  6640                  "value": "v1"
  6641                 }
  6642                },
  6643                {
  6644                 "tag": "istio.canonical_service",
  6645                 "literal": {
  6646                  "value": "httpbin"
  6647                 }
  6648                },
  6649                {
  6650                 "tag": "istio.mesh_id",
  6651                 "literal": {
  6652                  "value": "cluster.local"
  6653                 }
  6654                },
  6655                {
  6656                 "tag": "istio.namespace",
  6657                 "literal": {
  6658                  "value": "default"
  6659                 }
  6660                }
  6661               ]
  6662              },
  6663              "server_name": "istio-envoy",
  6664              "use_remote_address": false,
  6665              "forward_client_cert_details": "APPEND_FORWARD",
  6666              "set_current_client_cert_details": {
  6667               "subject": true,
  6668               "dns": true,
  6669               "uri": true
  6670              },
  6671              "upgrade_configs": [
  6672               {
  6673                "upgrade_type": "websocket"
  6674               }
  6675              ],
  6676              "stream_idle_timeout": "0s",
  6677              "normalize_path": true,
  6678              "request_id_extension": {
  6679               "typed_config": {
  6680                "@type": "type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig",
  6681                "use_request_id_for_trace_sampling": true
  6682               }
  6683              },
  6684              "path_with_escaped_slashes_action": "KEEP_UNCHANGED"
  6685             }
  6686            }
  6687           ],
  6688           "name": "0.0.0.0_80"
  6689          }
  6690         ],
  6691         "listener_filters": [
  6692          {
  6693           "name": "set_dst_address",
  6694           "typed_config": {
  6695            "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  6696            "type_url": "type.googleapis.com/istio.set_internal_dst_address.v1.Config"
  6697           }
  6698          }
  6699         ],
  6700         "traffic_direction": "INBOUND",
  6701         "internal_listener": {}
  6702        },
  6703        "last_updated": "2023-06-20T09:08:58.888Z"
  6704       }
  6705      },
  6706      {
  6707       "name": "connect_originate",
  6708       "active_state": {
  6709        "version_info": "2023-06-20T09:07:41Z/3",
  6710        "listener": {
  6711         "@type": "type.googleapis.com/envoy.config.listener.v3.Listener",
  6712         "name": "connect_originate",
  6713         "filter_chains": [
  6714          {
  6715           "filters": [
  6716            {
  6717             "name": "envoy.filters.network.tcp_proxy",
  6718             "typed_config": {
  6719              "@type": "type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy",
  6720              "stat_prefix": "connect_originate",
  6721              "cluster": "connect_originate",
  6722              "tunneling_config": {
  6723               "hostname": "%DOWNSTREAM_LOCAL_ADDRESS%",
  6724               "headers_to_add": [
  6725                {
  6726                 "header": {
  6727                  "key": "baggage",
  6728                  "value": "k8s.cluster.name=Kubernetes,k8s.namespace.name=default,k8s.deployment.name=httpbin,service.name=httpbin,service.version=v1"
  6729                 }
  6730                }
  6731               ]
  6732              }
  6733             }
  6734            }
  6735           ]
  6736          }
  6737         ],
  6738         "use_original_dst": false,
  6739         "listener_filters": [
  6740          {
  6741           "name": "set_dst_address",
  6742           "typed_config": {
  6743            "@type": "type.googleapis.com/udpa.type.v1.TypedStruct",
  6744            "type_url": "type.googleapis.com/istio.set_internal_dst_address.v1.Config"
  6745           }
  6746          }
  6747         ],
  6748         "internal_listener": {}
  6749        },
  6750        "last_updated": "2023-06-20T09:07:42.039Z"
  6751       }
  6752      }
  6753     ]
  6754    }
  6755   ]
  6756  }