From 40b59cb59d619fe17d049c47876e992e72eb0447 Mon Sep 17 00:00:00 2001 From: Xinhui Li Date: Tue, 5 Jan 2021 10:58:37 -0800 Subject: [PATCH] Add XF envoy Signed-off-by: xinhui li Change-Id: I664cc9c9a9cd153cabc8c0265007452b5a97afc8 --- mash | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/mash b/mash index 46a0057..5a4b220 100644 --- a/mash +++ b/mash @@ -1,17 +1,22 @@ apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: - name: proxy-protocol + name: ingressgateway-settings namespace: istio-system spec: - workloadSelector: - labels: - istio: ingressgateway configPatches: - - applyTo: LISTENER + - applyTo: NETWORK_FILTER + match: + listener: + filterChain: + filter: + name: envoy.http_connection_manager patch: operation: MERGE value: - listener_filters: - - name: envoy.filters.listener.proxy_protocol - - name: envoy.filters.listener.tls_inspector + name: envoy.http_connection_manager + typed_config: + "@type": type.googleapis.com/envoy.config.filter.network.http_connection_manager.v2.HttpConnectionManager + skip_xff_append: false + use_remote_address: true + xff_num_trusted_hops: 1 -- 2.16.6