Sketch of enhancing Istio authn policy to allow configuration of the istio-ecosystem/authservice

policy.yml

apiVersion: "authentication.istio.io/v1alpha1"
kind: "Policy"
metadata:
  name: "authcode-sample-app-authn-policy"
spec:
  targets:
    - name: authcode-sample-app
  principalBinding: USE_ORIGIN
  origins:
    - jwt:
        issuer: https://oidc-provider.yourcompany.com/oauth/token
        jwksUri: https://oidc-provider.yourcompany.com/token_keys
        # This is the new part: configure the settings of the istio-ecosystem/authservice
        # container(s) which will be deployed and configured by pilot
        authService:
          oidcProvider: https://oidc-provider.yourcompany.com/.well-known/openid-configuration
          oauthClient:
            secretName: istio.authServiceClientSecret
          scopes:
            - productpage.read
            - reviews.read