I don’t have a working example, but a quick search on discuss.io shows some examples: EnvoyFilter - ext_authz for istio 1.3