update EnvoyFilter CEL (#3589)

Author: zirain

kubernetes/customresourcedefinitions.gen.yaml

@@ -880,7 +880,7 @@ message EnvoyFilter {
 
   // One or more match conditions to be met before a patch is applied
   // to the generated configuration for a given proxy.
-  // +kubebuilder:validation:XValidation:message="only support waypointMatch when context is WAYPOINT",rule="(self.context == 'WAYPOINT' && has(self.waypoint)) || (self.context != 'WAYPOINT' && !has(self.waypoint))"
+  // +kubebuilder:validation:XValidation:message="only support waypointMatch when context is WAYPOINT",rule="has(self.context) ? (self.context == 'WAYPOINT' ? has(self.waypoint) : !has(self.waypoint)) : !has(self.waypoint)"
   message EnvoyConfigObjectMatch {
     // The specific config generation context to match on. istiod
     // generates envoy configuration in the context of a gateway,

networking/v1alpha3/envoy_filter.pb.go

@@ -1,5 +1,37 @@
 apiVersion: networking.istio.io/v1alpha3
 kind: EnvoyFilter
+metadata:
+  name: http-filter
+spec:
+  configPatches:
+    - applyTo: HTTP_FILTER
+      match:
+        # context omitted so that this applies to both sidecars and gateways
+        listener:
+          filterChain:
+            filter:
+              name: "envoy.filters.network.http_connection_manager"
+      patch:
+        operation: INSERT_FIRST
+        value:
+          name: envoy.filters.http.ext_proc
+          typed_config:
+            "@type": type.googleapis.com/envoy.extensions.filters.http.ext_proc.v3.ExternalProcessor
+            failure_mode_allow: false
+            allow_mode_override: true
+            processing_mode:
+              request_header_mode: "SEND"
+              response_header_mode: "SKIP"
+              request_body_mode: "FULL_DUPLEX_STREAMED"
+              response_body_mode: "NONE"
+              request_trailer_mode: "SEND"
+              response_trailer_mode: "SKIP"
+            grpc_service:
+              envoy_grpc:
+                cluster_name: fake-cluster
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: EnvoyFilter
 metadata:
   name: waypoint-http-filter
 spec: