Add XF envoy

Signed-off-by: xinhui li <xinhui.li@salesforce.com>
Change-Id: I664cc9c9a9cd153cabc8c0265007452b5a97afc8

diff --git a/mash b/mash
index 46a0057..5a4b220 100644 (file)
--- a/mash
+++ b/mash
@@ -1,17 +1,22 @@
 apiVersion: networking.istio.io/v1alpha3
 kind: EnvoyFilter
 metadata:
-  name: proxy-protocol
+  name: ingressgateway-settings
   namespace: istio-system
 spec:
-  workloadSelector:
-    labels:
-      istio: ingressgateway
   configPatches:
-  - applyTo: LISTENER
+  - applyTo: NETWORK_FILTER
+    match:
+      listener:
+        filterChain:
+          filter:
+            name: envoy.http_connection_manager
     patch:
       operation: MERGE
       value:
-        listener_filters:
-        - name: envoy.filters.listener.proxy_protocol
-        - name: envoy.filters.listener.tls_inspector
+        name: envoy.http_connection_manager
+        typed_config:
+          "@type": type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager
+          skip_xff_append: false
+          use_remote_address: true
+          xff_num_trusted_hops: 1