Test setting up authservice using filter injection in Istio 1.3.0

[cfryanr]

We would like to be able to use the alpha version of authservice with the latest release of Istio, v1.3.0.

In our testing with a pre-repease version of Istio 1.3 we were able to inject an envoy.ext_authz filter into the application's sidecar's inbound envoy.http_connection_manager using a EnvoyFilter configuration. We configured that envoy.ext_authz filter to send all incoming requests to the authservice via grpc check requests for evaluation.

Unfortunately, this same approach did not work with the first public release of Istio, v1.3.0. We would like to figure out how to make this work before release, because we had planned to document this as the recommended way to use the alpha version of the authservice with Istio on k8s.

[cfryanr]

Hi @nickrmc83. Now that you have a branch which updates to the latest version of envoy, I was wondering if you've experienced any issues with the newer Envoy?

I noticed on that branch you did not need to change the envoy.yaml file, so maybe you didn't have any problems?

As we mentioned in the meeting, we're having a hard time getting things working with the version of Envoy that is packaged into Istio v1.3.0, even though we had it all working with a pre-release version of 1.3. Just curious if you've had any similar problems.

[cfryanr]

We figured out how to get the authservice working with 1.3. We'll make sure to explain it in detail when we write up the overall instructions on how to use the alpha version of the authservice, as part of #9.