EnvoyFilterUsesAddOperationIncorrectly

Message NameEnvoyFilterUsesAddOperationIncorrectly
Message CodeIST0153
DescriptionThe ADD operation will be ignored when applyTo is set to ROUTE_CONFIGURATION, or HTTP_ROUTE.
LevelError

This message occurs when an EnvoyFilter uses the ADD operation and ApplyTo is set to ROUTE_CONFIGURATION or HTTP_ROUTE. This will cause the ADD operation to be ignored. At the moment only the MERGE operation can be used for ROUTE_CONFIGURATION.

An example

Consider an EnvoyFilter with the patch operation of ADD where this EnvoyFilter will just be ignored:

  1. apiVersion: networking.istio.io/v1alpha3
  2. kind: EnvoyFilter
  3. metadata:
  4.   name: test-auth-2
  5.   namespace: bookinfo
  6. spec:
  7.   configPatches:
  8.   - applyTo: ROUTE_CONFIGURATION
  9.     match:
  10.       context: SIDECAR_INBOUND
  11.     patch:
  12.       operation: ADD
  13.       filterClass: AUTHZ # This filter will run *after* the Istio authz filter.
  14.       value:
  15.         name: envoy.filters.http.ext_authz
  16.         typed_config:
  17.           "@type": type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
  18.           grpc_service:
  19.             envoy_grpc:
  20.               cluster_name: acme-ext-authz
  21.             initial_metadata:
  22.             - key: foo
  23.               value: myauth.acme # required by local ext auth server.