simple-secrets_server-envoy

envoy.yaml

    - name: simple-secrets-metrics
      address:
        socket_address: { address: 0.0.0.0, port_value: 10000 }
...
          tls_context:
            common_tls_context:
              tls_params:
                ecdh_curves: "X25519:P-256:P-521:P-384"
              tls_certificates:
                certificate_chain: { "filename": "/certs/svid.pem" }
                private_key: { "filename": "/certs/svid_key.pem" }
              validation_context:
                trusted_ca:
                  filename: /certs/svid_bundle.pem
                verify_subject_alt_name:
                  - "spiffe://example.org/prometheus-proxy"
...
  clusters:
    - name: secrets-metrics
      connect_timeout: 15s
      type: STATIC
      lb_policy: ROUND_ROBIN
      load_assignment:
        cluster_name: secrets-metrics
        endpoints:
          - lb_endpoints:
              - endpoint:
                  address:
                    socket_address:
                      address: 127.0.0.1
                      port_value: 3001