wasm-remote-load.yaml

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  labels:
    install.operator.istio.io/owning-resource: installed-state
    istio.io/rev: default
    operator.istio.io/component: Pilot
    operator.istio.io/managed: Reconcile
    operator.istio.io/version: 1.6-alpha.79511c659fcdcadd155cb1c17f3f4c4f8aba68ff
  name: stats-filter-1.6
  namespace: istio-system
spec:
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_OUTBOUND
      listener:
        filterChain:
          filter:
            name: envoy.http_connection_manager
            subFilter:
              name: envoy.router
      proxy:
        proxyVersion: ^1\.6.*
    patch:
      operation: INSERT_BEFORE
      value:
        name: istio.stats
        typed_config:
          '@type': type.googleapis.com/udpa.type.v1.TypedStruct
          type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
          value:
            config:
              configuration: |
                {
                  "debug": "false",
                  "stat_prefix": "istio"
                }
              root_id: stats_outbound
              vm_config:
                code:
                  remote:
                    http_uri:
                      uri: https://storage.googleapis.com/istio-build/proxy/stats-a166ec637278ca2495c677ac32d3c53bbc5f3a23.wasm
                      cluster: storage.googleapis.com
                      timeout: 10s
                    sha256: 80e572fe019460e901d47ac0d5af395c416a7683b45b0db6ccb460cd4d0e6032
                runtime: envoy.wasm.runtime.v8
                vm_id: stats_outbound
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_INBOUND
      listener:
        filterChain:
          filter:
            name: envoy.http_connection_manager
            subFilter:
              name: envoy.router
      proxy:
        proxyVersion: ^1\.6.*
    patch:
      operation: INSERT_BEFORE
      value:
        name: istio.stats
        typed_config:
          '@type': type.googleapis.com/udpa.type.v1.TypedStruct
          type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
          value:
            config:
              configuration: |
                {
                  "debug": "false",
                  "stat_prefix": "istio"
                }
              root_id: stats_inbound
              vm_config:
                code:
                  remote:
                    http_uri:
                      uri: https://storage.googleapis.com/istio-build/proxy/stats-a166ec637278ca2495c677ac32d3c53bbc5f3a23.wasm
                      cluster: storage.googleapis.com
                      timeout: 10s
                    sha256: 80e572fe019460e901d47ac0d5af395c416a7683b45b0db6ccb460cd4d0e6032
                runtime: envoy.wasm.runtime.v8
                vm_id: stats_inbound
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: envoy.http_connection_manager
            subFilter:
              name: envoy.router
      proxy:
        proxyVersion: ^1\.6.*
    patch:
      operation: INSERT_BEFORE
      value:
        name: istio.stats
        typed_config:
          '@type': type.googleapis.com/udpa.type.v1.TypedStruct
          type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
          value:
            config:
              configuration: |
                {
                  "debug": "false",
                  "stat_prefix": "istio",
                  "disable_host_header_fallback": true
                }
              root_id: stats_outbound
              vm_config:
                code:
                  remote:
                    http_uri:
                      uri: https://storage.googleapis.com/istio-build/proxy/stats-a166ec637278ca2495c677ac32d3c53bbc5f3a23.wasm
                      cluster: storage.googleapis.com
                      timeout: 10s
                    sha256: 80e572fe019460e901d47ac0d5af395c416a7683b45b0db6ccb460cd4d0e6032
                runtime: envoy.wasm.runtime.v8
                vm_id: stats_outbound  
---
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: google-cloud-storage-cluster
  namespace: istio-system
spec:
  configPatches:
  - applyTo: CLUSTER
    match:
      context: SIDECAR_OUTBOUND
    patch:
      operation: ADD
      value: 
        name: storage.googleapis.com
        connect_timeout: 10s
        type: STRICT_DNS
        dns_lookup_family: V4_ONLY
        transport_socket:
          name: envoy.transport_sockets.tls
        load_assignment:
          cluster_name: storage.googleapis.com
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: storage.googleapis.com
                    port_value: 443