With Istio-1.3 the envoyFilter for external-Auth (INBOUND) doesn't work

Networking
1

In Istio 1.3.1 when we create the EnvoyFilter external auth, the Istio-pilot fails to push the config to the Envoy SideCar.

I applied the following EnvoyFilter

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: 1-3-ext-auth
  namespace: istio-dev
spec:
  workloadSelector:
    labels:
      app: istio-hello
  configPatches:
    # The first patch adds the lua filter to the listener/http connection manager
  - applyTo: HTTP_FILTER
    match:
      context: SIDECAR_INBOUND
      listener:
        portNumber: 80
        filterChain:
          filter:
            name: "envoy.http_connection_manager"
            subFilter:
              name: "envoy.router"
    patch:
      operation: INSERT_BEFORE
      value: # lua filter specification
        name: envoy.ext_authz
        config:
          grpc_service:
            google_grpc:
              target_uri: 127.0.0.1:1999
              stat_prefix: aporeto-authz-ingress

Once I apply the above configuration I should see the Envoy sideCar to have the EnvoyFilter config pushed. But, I don’t see it.

Is the config wwong or am I missing something.

Thanks