filter.yaml

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: plugins-adapter-filter
  # Note this uses the root namespace. This can be moved depending on
  # namespace used for the MCP gateway router
  namespace: istio-system
spec:
  priority: 10 # After MCP gateway router if available
  workloadSelector:
    labels:
      istio: ingressgateway
  configPatches:
  - applyTo: HTTP_FILTER
    match:
      context: GATEWAY
      listener:
        portNumber: 8080
        filterChain:
          filter:
            name: "envoy.filters.network.http_connection_manager"
    patch:
      operation: INSERT_BEFORE
      value:
        name: envoy.filters.http.ext_proc
        typed_config:
          "@type": type.googleapis.com/envoy.extensions.filters.http.ext_proc.v3.ExternalProcessor
          failure_mode_allow: false
          mutation_rules:
            allow_all_routing: true
          processing_mode:
            request_header_mode: 'SEND'
            response_header_mode: 'SEND'
            request_body_mode: 'BUFFERED'
            response_body_mode: 'BUFFERED'
            request_trailer_mode: 'SKIP'
            response_trailer_mode: 'SKIP'
          grpc_service:
            envoy_grpc:
              cluster_name: outbound|50052||plugins-adapter-service.istio-system.svc.cluster.local