gateway-stats.yaml

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: stats-filter-1.9
  namespace: istio-system
spec:
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        filterChain:
          filter:
            name: envoy.http_connection_manager
            subFilter:
              name: envoy.router
      proxy:
        proxyVersion: ^1\.9.*
    patch:
      operation: INSERT_BEFORE
      value:
        name: istio.stats
        typed_config:
          '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
          value:
            config:
              configuration:
                '@type': type.googleapis.com/google.protobuf.StringValue
                value: |
                  {}
              root_id: stats_outbound
              vm_config:
                code:
                  remote:
                    http_uri:
                      uri: https://storage.googleapis.com/istio-build/proxy/stats-e42460d19bf315da5453114aa8c90e9a6a92d72a.wasm
                      cluster: storage.googleapis.com
                      timeout: 10s
                    sha256: ac7c06d28384a19e74e250787386444370111db8e457d5f2774deb720fb782f4
                runtime: envoy.wasm.runtime.v8
                vm_id: stats_outbound 
---
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: google-cloud-storage-cluster
  namespace: istio-system
spec:
  configPatches:
  - applyTo: CLUSTER
    match:
      context: GATEWAY
    patch:
      operation: ADD
      value: 
        name: storage.googleapis.com
        connect_timeout: 10s
        type: STRICT_DNS
        dns_lookup_family: V4_ONLY
        transport_socket:
          name: envoy.transport_sockets.tls
        load_assignment:
          cluster_name: storage.googleapis.com
          endpoints:
          - lb_endpoints:
            - endpoint:
                address:
                  socket_address:
                    address: storage.googleapis.com
                    port_value: 443