Hi folks,
I have an AuthorizationPolicy with custom action which connects to external authz. I’m trying to add a WasmPlugin before AuthorizationPolicy but seems like it is always coming next to external AuthorizationPolicy. I have tried with AUTHN and AUTHZ phase in WasmPlugin and with high priority but still no luck.
Is there any way to achieve this?
SampleCode
apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
name: auth-wasm
namespace: default
spec:
selector:
matchLabels:
app: nginx
url: http://host.minikube.internal:9000/main.wasm
phase: AUTHN
priority: 100
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: auth-policy
namespace: default #Change
spec:
selector:
matchLabels:
app: nginx #Change
action: CUSTOM
provider:
name: test-ext-authz-http
rules:
- {}