grpc-envoyfilter.yaml

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: inf-auth-gateway-filter-grpc
spec:
  workloadLabels:
    app: istio-ingressgateway
  filters:
  - listenerMatch:
      portNumber: 443
      listenerType: GATEWAY
    filterName: envoy.ext_authz
    filterType: HTTP
    insertPosition:
      index: FIRST
    filterConfig:                      
      grpc_service:  
        google_grpc:
          target_uri: inf-auth-gateway-grpc.x.svc.cluster.local:80
          stat_prefix: ext_authz
      #failure_mode_allow: true
        #timeout: 1s