configs:
  - '@type': type.googleapis.com/envoy.admin.v3.BootstrapConfigDump
    bootstrap:
      node:
        id: sidecar~172.21.206.230~fortio-server.mark~mark.svc.cluster.local
        cluster: fortio-server.mark
        metadata:
          ISTIO_PROXY_SHA: 7ae8e27f274b33dc2f4d83100aea5971ed6698d3
          PROV_CERT: var/run/secrets/istio/root-cert.pem
          LABELS:
            app: fortio-server
            security.istio.io/tlsMode: istio
            service.istio.io/canonical-revision: latest
            app.kubernetes.io/name: fortio-server
            service.istio.io/canonical-name: fortio-server
          ENVOY_STATUS_PORT: 15021
          SERVICE_ACCOUNT: default
          ANNOTATIONS:
            kubernetes.io/config.source: api
            prometheus.io/port: "15020"
            prometheus.io/scrape: "true"
            kubectl.kubernetes.io/last-applied-configuration: |
              {"apiVersion":"v1","kind":"Pod","metadata":{"annotations":{},"labels":{"app":"fortio-server","app.kubernetes.io/name":"fortio-server"},"name":"fortio-server","namespace":"mark"},"spec":{"containers":[{"args":["server","-M","8070 http://fortio-server-l2:8080"],"command":["/usr/bin/fortio"],"image":"docker.io/fortio/fortio","imagePullPolicy":"Always","name":"main-app","ports":[{"containerPort":8080,"name":"http","protocol":"TCP"},{"containerPort":8070,"name":"http-m","protocol":"TCP"},{"containerPort":8079,"name":"grpc","protocol":"TCP"}]}],"imagePullSecrets":[{"name":"docker-registry-key"}],"nodeSelector":{"topology.istio.io/subzone":"worker005","topology.kubernetes.io/region":"us-east-1","topology.kubernetes.io/zone":"worker005"},"restartPolicy":"Always"}}
            cni.projectcalico.org/podIP: 172.21.206.230/32
            cni.projectcalico.org/podIPs: 172.21.206.230/32
            kubectl.kubernetes.io/default-logs-container: main-app
            kubernetes.io/config.seen: "2022-08-28T00:40:09.016234527Z"
            sidecar.istio.io/status: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["workload-socket","workload-certs","istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert"],"imagePullSecrets":null,"revision":"default"}'
            kubectl.kubernetes.io/default-container: main-app
            prometheus.io/path: /stats/prometheus
          APP_CONTAINERS: main-app
          INTERCEPTION_MODE: REDIRECT
          MESH_ID: cluster.local
          PILOT_SAN:
            - istiod.istio-system.svc
          NAMESPACE: mark
          ENVOY_PROMETHEUS_PORT: 15090
          CLUSTER_ID: Kubernetes
          ISTIO_VERSION: 1.14.3
          OWNER: kubernetes://apis/v1/namespaces/mark/pods/fortio-server
          INSTANCE_IPS: 172.21.206.230
          POD_PORTS: '[{"name":"http","containerPort":8080,"protocol":"TCP"},{"name":"http-m","containerPort":8070,"protocol":"TCP"},{"name":"grpc","containerPort":8079,"protocol":"TCP"}]'
          PROXY_CONFIG:
            parentShutdownDuration: 60s
            concurrency: 2
            discoveryAddress: istiod.istio-system.svc:15012
            proxyAdminPort: 15000
            controlPlaneAuthPolicy: MUTUAL_TLS
            serviceCluster: istio-proxy
            terminationDrainDuration: 5s
            statNameLength: 189
            configPath: ./etc/istio/proxy
            statusPort: 15020
            binaryPath: /usr/local/bin/envoy
            drainDuration: 45s
            tracing:
              zipkin:
                address: zipkin.istio-system:9411
          WORKLOAD_NAME: fortio-server
          NAME: fortio-server
        locality: {}
        user_agent_name: envoy
        user_agent_build_version:
          version:
            major_number: 1
            minor_number: 22
            patch: 3
          metadata:
            build.type: RELEASE
            revision.status: Clean
            ssl.version: BoringSSL
            build.label: dev
            revision.sha: 7ae8e27f274b33dc2f4d83100aea5971ed6698d3
        extensions:
          - name: envoy.access_loggers.file
            category: envoy.access_loggers
          - name: envoy.access_loggers.http_grpc
            category: envoy.access_loggers
          - name: envoy.access_loggers.open_telemetry
            category: envoy.access_loggers
          - name: envoy.access_loggers.stderr
            category: envoy.access_loggers
          - name: envoy.access_loggers.stdout
            category: envoy.access_loggers
          - name: envoy.access_loggers.tcp_grpc
            category: envoy.access_loggers
          - name: envoy.access_loggers.wasm
            category: envoy.access_loggers
          - name: envoy.file_access_log
            category: envoy.access_loggers
          - name: envoy.http_grpc_access_log
            category: envoy.access_loggers
          - name: envoy.open_telemetry_access_log
            category: envoy.access_loggers
          - name: envoy.stderr_access_log
            category: envoy.access_loggers
          - name: envoy.stdout_access_log
            category: envoy.access_loggers
          - name: envoy.tcp_grpc_access_log
            category: envoy.access_loggers
          - name: envoy.wasm_access_log
            category: envoy.access_loggers
          - name: envoy.key_value.file_based
            category: envoy.common.key_value
          - name: default
            category: network.connection.client
          - name: envoy.client_ssl_auth
            category: envoy.filters.network
          - name: envoy.echo
            category: envoy.filters.network
          - name: envoy.ext_authz
            category: envoy.filters.network
          - name: envoy.filters.network.client_ssl_auth
            category: envoy.filters.network
          - name: envoy.filters.network.connection_limit
            category: envoy.filters.network
          - name: envoy.filters.network.direct_response
            category: envoy.filters.network
          - name: envoy.filters.network.dubbo_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.echo
            category: envoy.filters.network
          - name: envoy.filters.network.ext_authz
            category: envoy.filters.network
          - name: envoy.filters.network.http_connection_manager
            category: envoy.filters.network
          - name: envoy.filters.network.local_ratelimit
            category: envoy.filters.network
          - name: envoy.filters.network.metadata_exchange
            category: envoy.filters.network
          - name: envoy.filters.network.mongo_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.mysql_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.ratelimit
            category: envoy.filters.network
          - name: envoy.filters.network.rbac
            category: envoy.filters.network
          - name: envoy.filters.network.redis_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.sip_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.sni_cluster
            category: envoy.filters.network
          - name: envoy.filters.network.sni_dynamic_forward_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.tcp_cluster_rewrite
            category: envoy.filters.network
          - name: envoy.filters.network.tcp_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.thrift_proxy
            category: envoy.filters.network
          - name: envoy.filters.network.wasm
            category: envoy.filters.network
          - name: envoy.filters.network.zookeeper_proxy
            category: envoy.filters.network
          - name: envoy.http_connection_manager
            category: envoy.filters.network
          - name: envoy.mongo_proxy
            category: envoy.filters.network
          - name: envoy.ratelimit
            category: envoy.filters.network
          - name: envoy.redis_proxy
            category: envoy.filters.network
          - name: envoy.tcp_proxy
            category: envoy.filters.network
          - name: forward_downstream_sni
            category: envoy.filters.network
          - name: sni_verifier
            category: envoy.filters.network
          - name: envoy.filters.connection_pools.tcp.generic
            category: envoy.upstreams
          - name: envoy.bandwidth_limit
            category: envoy.filters.http
          - name: envoy.buffer
            category: envoy.filters.http
          - name: envoy.cors
            category: envoy.filters.http
          - name: envoy.csrf
            category: envoy.filters.http
          - name: envoy.ext_authz
            category: envoy.filters.http
          - name: envoy.ext_proc
            category: envoy.filters.http
          - name: envoy.fault
            category: envoy.filters.http
          - name: envoy.filters.http.adaptive_concurrency
            category: envoy.filters.http
          - name: envoy.filters.http.admission_control
            category: envoy.filters.http
          - name: envoy.filters.http.alternate_protocols_cache
            category: envoy.filters.http
          - name: envoy.filters.http.aws_lambda
            category: envoy.filters.http
          - name: envoy.filters.http.aws_request_signing
            category: envoy.filters.http
          - name: envoy.filters.http.bandwidth_limit
            category: envoy.filters.http
          - name: envoy.filters.http.buffer
            category: envoy.filters.http
          - name: envoy.filters.http.cache
            category: envoy.filters.http
          - name: envoy.filters.http.cdn_loop
            category: envoy.filters.http
          - name: envoy.filters.http.composite
            category: envoy.filters.http
          - name: envoy.filters.http.compressor
            category: envoy.filters.http
          - name: envoy.filters.http.cors
            category: envoy.filters.http
          - name: envoy.filters.http.csrf
            category: envoy.filters.http
          - name: envoy.filters.http.decompressor
            category: envoy.filters.http
          - name: envoy.filters.http.dynamic_forward_proxy
            category: envoy.filters.http
          - name: envoy.filters.http.dynamo
            category: envoy.filters.http
          - name: envoy.filters.http.ext_authz
            category: envoy.filters.http
          - name: envoy.filters.http.ext_proc
            category: envoy.filters.http
          - name: envoy.filters.http.fault
            category: envoy.filters.http
          - name: envoy.filters.http.grpc_http1_bridge
            category: envoy.filters.http
          - name: envoy.filters.http.grpc_http1_reverse_bridge
            category: envoy.filters.http
          - name: envoy.filters.http.grpc_json_transcoder
            category: envoy.filters.http
          - name: envoy.filters.http.grpc_stats
            category: envoy.filters.http
          - name: envoy.filters.http.grpc_web
            category: envoy.filters.http
          - name: envoy.filters.http.header_to_metadata
            category: envoy.filters.http
          - name: envoy.filters.http.health_check
            category: envoy.filters.http
          - name: envoy.filters.http.ip_tagging
            category: envoy.filters.http
          - name: envoy.filters.http.jwt_authn
            category: envoy.filters.http
          - name: envoy.filters.http.local_ratelimit
            category: envoy.filters.http
          - name: envoy.filters.http.lua
            category: envoy.filters.http
          - name: envoy.filters.http.oauth2
            category: envoy.filters.http
          - name: envoy.filters.http.on_demand
            category: envoy.filters.http
          - name: envoy.filters.http.original_src
            category: envoy.filters.http
          - name: envoy.filters.http.ratelimit
            category: envoy.filters.http
          - name: envoy.filters.http.rbac
            category: envoy.filters.http
          - name: envoy.filters.http.router
            category: envoy.filters.http
          - name: envoy.filters.http.set_metadata
            category: envoy.filters.http
          - name: envoy.filters.http.stateful_session
            category: envoy.filters.http
          - name: envoy.filters.http.tap
            category: envoy.filters.http
          - name: envoy.filters.http.wasm
            category: envoy.filters.http
          - name: envoy.grpc_http1_bridge
            category: envoy.filters.http
          - name: envoy.grpc_json_transcoder
            category: envoy.filters.http
          - name: envoy.grpc_web
            category: envoy.filters.http
          - name: envoy.health_check
            category: envoy.filters.http
          - name: envoy.http_dynamo_filter
            category: envoy.filters.http
          - name: envoy.ip_tagging
            category: envoy.filters.http
          - name: envoy.local_rate_limit
            category: envoy.filters.http
          - name: envoy.lua
            category: envoy.filters.http
          - name: envoy.rate_limit
            category: envoy.filters.http
          - name: envoy.router
            category: envoy.filters.http
          - name: istio.alpn
            category: envoy.filters.http
          - name: istio_authn
            category: envoy.filters.http
          - name: match-wrapper
            category: envoy.filters.http
          - name: envoy.network.dns_resolver.cares
            category: envoy.network.dns_resolver
          - name: composite-action
            category: envoy.matching.action
          - name: skip
            category: envoy.matching.action
          - name: envoy.dynamic.ot
            category: envoy.tracers
          - name: envoy.lightstep
            category: envoy.tracers
          - name: envoy.tracers.datadog
            category: envoy.tracers
          - name: envoy.tracers.dynamic_ot
            category: envoy.tracers
          - name: envoy.tracers.lightstep
            category: envoy.tracers
          - name: envoy.tracers.opencensus
            category: envoy.tracers
          - name: envoy.tracers.skywalking
            category: envoy.tracers
          - name: envoy.tracers.xray
            category: envoy.tracers
          - name: envoy.tracers.zipkin
            category: envoy.tracers
          - name: envoy.zipkin
            category: envoy.tracers
          - name: envoy.extensions.http.cache.simple
            category: envoy.http.cache
          - name: preserve_case
            category: envoy.http.stateful_header_formatters
          - name: auto
            category: envoy.thrift_proxy.transports
          - name: framed
            category: envoy.thrift_proxy.transports
          - name: header
            category: envoy.thrift_proxy.transports
          - name: unframed
            category: envoy.thrift_proxy.transports
          - name: envoy.bootstrap.wasm
            category: envoy.bootstrap
          - name: envoy.extensions.network.socket_interface.default_socket_interface
            category: envoy.bootstrap
          - name: envoy.formatter.metadata
            category: envoy.formatter
          - name: envoy.formatter.req_without_query
            category: envoy.formatter
          - name: envoy.dog_statsd
            category: envoy.stats_sinks
          - name: envoy.graphite_statsd
            category: envoy.stats_sinks
          - name: envoy.metrics_service
            category: envoy.stats_sinks
          - name: envoy.stat_sinks.dog_statsd
            category: envoy.stats_sinks
          - name: envoy.stat_sinks.graphite_statsd
            category: envoy.stats_sinks
          - name: envoy.stat_sinks.hystrix
            category: envoy.stats_sinks
          - name: envoy.stat_sinks.metrics_service
            category: envoy.stats_sinks
          - name: envoy.stat_sinks.statsd
            category: envoy.stats_sinks
          - name: envoy.stat_sinks.wasm
            category: envoy.stats_sinks
          - name: envoy.statsd
            category: envoy.stats_sinks
          - name: envoy.matching.common_inputs.environment_variable
            category: envoy.matching.common_inputs
          - name: envoy.filters.dubbo.router
            category: envoy.dubbo_proxy.filters
          - name: envoy.filters.listener.http_inspector
            category: envoy.filters.listener
          - name: envoy.filters.listener.original_dst
            category: envoy.filters.listener
          - name: envoy.filters.listener.original_src
            category: envoy.filters.listener
          - name: envoy.filters.listener.proxy_protocol
            category: envoy.filters.listener
          - name: envoy.filters.listener.tls_inspector
            category: envoy.filters.listener
          - name: envoy.listener.http_inspector
            category: envoy.filters.listener
          - name: envoy.listener.original_dst
            category: envoy.filters.listener
          - name: envoy.listener.original_src
            category: envoy.filters.listener
          - name: envoy.listener.proxy_protocol
            category: envoy.filters.listener
          - name: envoy.listener.tls_inspector
            category: envoy.filters.listener
          - name: envoy.filters.thrift.header_to_metadata
            category: envoy.thrift_proxy.filters
          - name: envoy.filters.thrift.rate_limit
            category: envoy.thrift_proxy.filters
          - name: envoy.filters.thrift.router
            category: envoy.thrift_proxy.filters
          - name: envoy.internal_redirect_predicates.allow_listed_routes
            category: envoy.internal_redirect_predicates
          - name: envoy.internal_redirect_predicates.previous_routes
            category: envoy.internal_redirect_predicates
          - name: envoy.internal_redirect_predicates.safe_cross_scheme
            category: envoy.internal_redirect_predicates
          - name: envoy.wasm.runtime.null
            category: envoy.wasm.runtime
          - name: envoy.wasm.runtime.v8
            category: envoy.wasm.runtime
          - name: envoy.health_checkers.redis
            category: envoy.health_checkers
          - name: envoy.watchdog.abort_action
            category: envoy.guarddog_actions
          - name: envoy.watchdog.profile_action
            category: envoy.guarddog_actions
          - name: envoy.http.original_ip_detection.custom_header
            category: envoy.http.original_ip_detection
          - name: envoy.http.original_ip_detection.xff
            category: envoy.http.original_ip_detection
          - name: envoy.http.stateful_session.cookie
            category: envoy.http.stateful_session
          - name: dubbo
            category: envoy.dubbo_proxy.protocols
          - name: envoy.request_id.uuid
            category: envoy.request_id
          - name: dubbo.hessian2
            category: envoy.dubbo_proxy.serializers
          - name: envoy.matching.inputs.request_headers
            category: envoy.matching.http.input
          - name: envoy.matching.inputs.request_trailers
            category: envoy.matching.http.input
          - name: envoy.matching.inputs.response_headers
            category: envoy.matching.http.input
          - name: envoy.matching.inputs.response_trailers
            category: envoy.matching.http.input
          - name: envoy.quic.crypto_stream.server.quiche
            category: envoy.quic.server.crypto_stream
          - name: envoy.grpc_credentials.aws_iam
            category: envoy.grpc_credentials
          - name: envoy.grpc_credentials.default
            category: envoy.grpc_credentials
          - name: envoy.grpc_credentials.file_based_metadata
            category: envoy.grpc_credentials
          - name: envoy.quic.proof_source.filter_chain
            category: envoy.quic.proof_source
          - name: envoy.ip
            category: envoy.resolvers
          - name: envoy.cluster.eds
            category: envoy.clusters
          - name: envoy.cluster.logical_dns
            category: envoy.clusters
          - name: envoy.cluster.original_dst
            category: envoy.clusters
          - name: envoy.cluster.static
            category: envoy.clusters
          - name: envoy.cluster.strict_dns
            category: envoy.clusters
          - name: envoy.clusters.aggregate
            category: envoy.clusters
          - name: envoy.clusters.dynamic_forward_proxy
            category: envoy.clusters
          - name: envoy.clusters.redis
            category: envoy.clusters
          - name: envoy.compression.brotli.decompressor
            category: envoy.compression.decompressor
          - name: envoy.compression.gzip.decompressor
            category: envoy.compression.decompressor
          - name: envoy.rbac.matchers.upstream_ip_port
            category: envoy.rbac.matchers
          - name: envoy.extensions.upstreams.http.v3.HttpProtocolOptions
            category: envoy.upstream_options
          - name: envoy.upstreams.http.http_protocol_options
            category: envoy.upstream_options
          - name: envoy.filters.network.upstream.metadata_exchange
            category: envoy.filters.upstream_network
          - name: envoy.retry_priorities.previous_priorities
            category: envoy.retry_priorities
          - name: envoy.rate_limit_descriptors.expr
            category: envoy.rate_limit_descriptors
          - name: envoy.transport_sockets.alts
            category: envoy.transport_sockets.upstream
          - name: envoy.transport_sockets.quic
            category: envoy.transport_sockets.upstream
          - name: envoy.transport_sockets.raw_buffer
            category: envoy.transport_sockets.upstream
          - name: envoy.transport_sockets.starttls
            category: envoy.transport_sockets.upstream
          - name: envoy.transport_sockets.tap
            category: envoy.transport_sockets.upstream
          - name: envoy.transport_sockets.tls
            category: envoy.transport_sockets.upstream
          - name: envoy.transport_sockets.upstream_proxy_protocol
            category: envoy.transport_sockets.upstream
          - name: raw_buffer
            category: envoy.transport_sockets.upstream
          - name: starttls
            category: envoy.transport_sockets.upstream
          - name: tls
            category: envoy.transport_sockets.upstream
          - name: envoy.tls.cert_validator.default
            category: envoy.tls.cert_validator
          - name: envoy.tls.cert_validator.spiffe
            category: envoy.tls.cert_validator
          - name: envoy.transport_sockets.alts
            category: envoy.transport_sockets.downstream
          - name: envoy.transport_sockets.quic
            category: envoy.transport_sockets.downstream
          - name: envoy.transport_sockets.raw_buffer
            category: envoy.transport_sockets.downstream
          - name: envoy.transport_sockets.starttls
            category: envoy.transport_sockets.downstream
          - name: envoy.transport_sockets.tap
            category: envoy.transport_sockets.downstream
          - name: envoy.transport_sockets.tls
            category: envoy.transport_sockets.downstream
          - name: raw_buffer
            category: envoy.transport_sockets.downstream
          - name: starttls
            category: envoy.transport_sockets.downstream
          - name: tls
            category: envoy.transport_sockets.downstream
          - name: envoy.access_loggers.extension_filters.cel
            category: envoy.access_logger.extension_filters
          - name: auto
            category: envoy.thrift_proxy.protocols
          - name: binary
            category: envoy.thrift_proxy.protocols
          - name: binary/non-strict
            category: envoy.thrift_proxy.protocols
          - name: compact
            category: envoy.thrift_proxy.protocols
          - name: twitter
            category: envoy.thrift_proxy.protocols
          - name: envoy.filters.udp.dns_filter
            category: envoy.filters.udp_listener
          - name: envoy.filters.udp_listener.udp_proxy
            category: envoy.filters.udp_listener
          - name: default
            category: envoy.dubbo_proxy.route_matchers
          - name: cryptomb
            category: envoy.tls.key_providers
          - name: envoy.matching.matchers.consistent_hashing
            category: envoy.matching.input_matchers
          - name: envoy.matching.matchers.ip
            category: envoy.matching.input_matchers
          - name: envoy.resource_monitors.fixed_heap
            category: envoy.resource_monitors
          - name: envoy.resource_monitors.injected_resource
            category: envoy.resource_monitors
          - name: envoy.compression.brotli.compressor
            category: envoy.compression.compressor
          - name: envoy.compression.gzip.compressor
            category: envoy.compression.compressor
          - name: envoy.retry_host_predicates.omit_canary_hosts
            category: envoy.retry_host_predicates
          - name: envoy.retry_host_predicates.omit_host_metadata
            category: envoy.retry_host_predicates
          - name: envoy.retry_host_predicates.previous_hosts
            category: envoy.retry_host_predicates
          - name: envoy.filters.sip.router
            category: envoy.sip_proxy.filters
          - name: envoy.matching.inputs.application_protocol
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.destination_ip
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.destination_port
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.direct_source_ip
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.server_name
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.source_ip
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.source_port
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.source_type
            category: envoy.matching.network.input
          - name: envoy.matching.inputs.transport_protocol
            category: envoy.matching.network.input
      static_resources:
        listeners:
          - address:
              socket_address:
                address: 0.0.0.0
                port_value: 15090
            filter_chains:
              - filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: stats
                      route_config:
                        virtual_hosts:
                          - name: backend
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /stats/prometheus
                                route:
                                  cluster: prometheus_stats
                      http_filters:
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
          - address:
              socket_address:
                address: 0.0.0.0
                port_value: 15021
            filter_chains:
              - filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: agent
                      route_config:
                        virtual_hosts:
                          - name: backend
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /healthz/ready
                                route:
                                  cluster: agent
                      http_filters:
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
        clusters:
          - name: prometheus_stats
            type: STATIC
            connect_timeout: 0.250s
            load_assignment:
              cluster_name: prometheus_stats
              endpoints:
                - lb_endpoints:
                    - endpoint:
                        address:
                          socket_address:
                            address: 127.0.0.1
                            port_value: 15000
          - name: agent
            type: STATIC
            connect_timeout: 0.250s
            load_assignment:
              cluster_name: agent
              endpoints:
                - lb_endpoints:
                    - endpoint:
                        address:
                          socket_address:
                            address: 127.0.0.1
                            port_value: 15020
          - name: sds-grpc
            type: STATIC
            connect_timeout: 1s
            load_assignment:
              cluster_name: sds-grpc
              endpoints:
                - lb_endpoints:
                    - endpoint:
                        address:
                          pipe:
                            path: ./var/run/secrets/workload-spiffe-uds/socket
            typed_extension_protocol_options:
              envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
                '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
                explicit_http_config:
                  http2_protocol_options: {}
          - name: xds-grpc
            type: STATIC
            connect_timeout: 1s
            max_requests_per_connection: 1
            circuit_breakers:
              thresholds:
                - max_connections: 100000
                  max_pending_requests: 100000
                  max_requests: 100000
                - priority: HIGH
                  max_connections: 100000
                  max_pending_requests: 100000
                  max_requests: 100000
            upstream_connection_options:
              tcp_keepalive:
                keepalive_time: 300
            load_assignment:
              cluster_name: xds-grpc
              endpoints:
                - lb_endpoints:
                    - endpoint:
                        address:
                          pipe:
                            path: ./etc/istio/proxy/XDS
            typed_extension_protocol_options:
              envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
                '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
                explicit_http_config:
                  http2_protocol_options: {}
          - name: zipkin
            type: STRICT_DNS
            connect_timeout: 1s
            dns_refresh_rate: 30s
            dns_lookup_family: V4_ONLY
            load_assignment:
              cluster_name: zipkin
              endpoints:
                - lb_endpoints:
                    - endpoint:
                        address:
                          socket_address:
                            address: zipkin.istio-system
                            port_value: 9411
            respect_dns_ttl: true
      dynamic_resources:
        lds_config:
          ads: {}
          initial_fetch_timeout: 0s
          resource_api_version: V3
        cds_config:
          ads: {}
          initial_fetch_timeout: 0s
          resource_api_version: V3
        ads_config:
          api_type: GRPC
          grpc_services:
            - envoy_grpc:
                cluster_name: xds-grpc
          set_node_on_first_message_only: true
          transport_api_version: V3
      tracing:
        http:
          name: envoy.tracers.zipkin
          typed_config:
            '@type': type.googleapis.com/envoy.config.trace.v3.ZipkinConfig
            collector_cluster: zipkin
            collector_endpoint: /api/v2/spans
            trace_id_128bit: true
            shared_span_context: false
            collector_endpoint_version: HTTP_JSON
      admin:
        access_log_path: /dev/null
        profile_path: /var/lib/istio/data/envoy.prof
        address:
          socket_address:
            address: 127.0.0.1
            port_value: 15000
      stats_config:
        stats_tags:
          - tag_name: cluster_name
            regex: ^cluster\.((.+?(\..+?\.svc\.cluster\.local)?)\.)
          - tag_name: tcp_prefix
            regex: ^tcp\.((.*?)\.)\w+?$
          - tag_name: response_code
            regex: (response_code=\.=(.+?);\.;)|_rq(_(\.d{3}))$
          - tag_name: response_code_class
            regex: _rq(_(\dxx))$
          - tag_name: http_conn_manager_listener_prefix
            regex: ^listener(?=\.).*?\.http\.(((?:[_.[:digit:]]*|[_\[\]aAbBcCdDeEfF[:digit:]]*))\.)
          - tag_name: http_conn_manager_prefix
            regex: ^http\.(((?:[_.[:digit:]]*|[_\[\]aAbBcCdDeEfF[:digit:]]*))\.)
          - tag_name: listener_address
            regex: ^listener\.(((?:[_.[:digit:]]*|[_\[\]aAbBcCdDeEfF[:digit:]]*))\.)
          - tag_name: mongo_prefix
            regex: ^mongo\.(.+?)\.(collection|cmd|cx_|op_|delays_|decoding_)(.*?)$
          - tag_name: reporter
            regex: (reporter=\.=(.*?);\.;)
          - tag_name: source_namespace
            regex: (source_namespace=\.=(.*?);\.;)
          - tag_name: source_workload
            regex: (source_workload=\.=(.*?);\.;)
          - tag_name: source_workload_namespace
            regex: (source_workload_namespace=\.=(.*?);\.;)
          - tag_name: source_principal
            regex: (source_principal=\.=(.*?);\.;)
          - tag_name: source_app
            regex: (source_app=\.=(.*?);\.;)
          - tag_name: source_version
            regex: (source_version=\.=(.*?);\.;)
          - tag_name: source_cluster
            regex: (source_cluster=\.=(.*?);\.;)
          - tag_name: destination_namespace
            regex: (destination_namespace=\.=(.*?);\.;)
          - tag_name: destination_workload
            regex: (destination_workload=\.=(.*?);\.;)
          - tag_name: destination_workload_namespace
            regex: (destination_workload_namespace=\.=(.*?);\.;)
          - tag_name: destination_principal
            regex: (destination_principal=\.=(.*?);\.;)
          - tag_name: destination_app
            regex: (destination_app=\.=(.*?);\.;)
          - tag_name: destination_version
            regex: (destination_version=\.=(.*?);\.;)
          - tag_name: destination_service
            regex: (destination_service=\.=(.*?);\.;)
          - tag_name: destination_service_name
            regex: (destination_service_name=\.=(.*?);\.;)
          - tag_name: destination_service_namespace
            regex: (destination_service_namespace=\.=(.*?);\.;)
          - tag_name: destination_port
            regex: (destination_port=\.=(.*?);\.;)
          - tag_name: destination_cluster
            regex: (destination_cluster=\.=(.*?);\.;)
          - tag_name: request_protocol
            regex: (request_protocol=\.=(.*?);\.;)
          - tag_name: request_operation
            regex: (request_operation=\.=(.*?);\.;)
          - tag_name: request_host
            regex: (request_host=\.=(.*?);\.;)
          - tag_name: response_flags
            regex: (response_flags=\.=(.*?);\.;)
          - tag_name: grpc_response_status
            regex: (grpc_response_status=\.=(.*?);\.;)
          - tag_name: connection_security_policy
            regex: (connection_security_policy=\.=(.*?);\.;)
          - tag_name: source_canonical_service
            regex: (source_canonical_service=\.=(.*?);\.;)
          - tag_name: destination_canonical_service
            regex: (destination_canonical_service=\.=(.*?);\.;)
          - tag_name: source_canonical_revision
            regex: (source_canonical_revision=\.=(.*?);\.;)
          - tag_name: destination_canonical_revision
            regex: (destination_canonical_revision=\.=(.*?);\.;)
          - tag_name: cache
            regex: (cache\.(.+?)\.)
          - tag_name: component
            regex: (component\.(.+?)\.)
          - tag_name: tag
            regex: (tag\.(.+?);\.)
          - tag_name: wasm_filter
            regex: (wasm_filter\.(.+?)\.)
          - tag_name: authz_enforce_result
            regex: rbac(\.(allowed|denied))
          - tag_name: authz_dry_run_action
            regex: (\.istio_dry_run_(allow|deny)_)
          - tag_name: authz_dry_run_result
            regex: (\.shadow_(allowed|denied))
        use_all_default_tags: false
        stats_matcher:
          inclusion_list:
            patterns:
              - prefix: reporter=
              - prefix: cluster_manager
              - prefix: listener_manager
              - prefix: server
              - prefix: cluster.xds-grpc
              - prefix: wasm
              - suffix: rbac.allowed
              - suffix: rbac.denied
              - suffix: shadow_allowed
              - suffix: shadow_denied
              - prefix: component
      layered_runtime:
        layers:
          - name: global config
            static_layer:
              envoy.reloadable_features.http_reject_path_with_fragment: "false"
              envoy.reloadable_features.no_extension_lookup_by_name: "false"
              overload.global_downstream_max_connections: "2147483647"
              envoy.reloadable_features.require_strict_1xx_and_204_response_headers: "false"
              envoy.deprecated_features:envoy.config.listener.v3.Listener.hidden_envoy_deprecated_use_original_dst: "true"
              re2.max_program_size.error_level: "32768"
          - name: admin
            admin_layer: {}
    last_updated: "2022-08-28T00:41:06.552Z"
  - '@type': type.googleapis.com/envoy.admin.v3.ClustersConfigDump
    version_info: 2022-08-28T00:41:53Z/12
    static_clusters:
      - cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: agent
          type: STATIC
          connect_timeout: 0.250s
          load_assignment:
            cluster_name: agent
            endpoints:
              - lb_endpoints:
                  - endpoint:
                      address:
                        socket_address:
                          address: 127.0.0.1
                          port_value: 15020
        last_updated: "2022-08-28T00:41:06.707Z"
      - cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: prometheus_stats
          type: STATIC
          connect_timeout: 0.250s
          load_assignment:
            cluster_name: prometheus_stats
            endpoints:
              - lb_endpoints:
                  - endpoint:
                      address:
                        socket_address:
                          address: 127.0.0.1
                          port_value: 15000
        last_updated: "2022-08-28T00:41:06.707Z"
      - cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: sds-grpc
          type: STATIC
          connect_timeout: 1s
          load_assignment:
            cluster_name: sds-grpc
            endpoints:
              - lb_endpoints:
                  - endpoint:
                      address:
                        pipe:
                          path: ./var/run/secrets/workload-spiffe-uds/socket
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options: {}
        last_updated: "2022-08-28T00:41:06.707Z"
      - cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: xds-grpc
          type: STATIC
          connect_timeout: 1s
          max_requests_per_connection: 1
          circuit_breakers:
            thresholds:
              - max_connections: 100000
                max_pending_requests: 100000
                max_requests: 100000
              - priority: HIGH
                max_connections: 100000
                max_pending_requests: 100000
                max_requests: 100000
          upstream_connection_options:
            tcp_keepalive:
              keepalive_time: 300
          load_assignment:
            cluster_name: xds-grpc
            endpoints:
              - lb_endpoints:
                  - endpoint:
                      address:
                        pipe:
                          path: ./etc/istio/proxy/XDS
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options: {}
        last_updated: "2022-08-28T00:41:06.774Z"
      - cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: zipkin
          type: STRICT_DNS
          connect_timeout: 1s
          dns_refresh_rate: 30s
          dns_lookup_family: V4_ONLY
          load_assignment:
            cluster_name: zipkin
            endpoints:
              - lb_endpoints:
                  - endpoint:
                      address:
                        socket_address:
                          address: zipkin.istio-system
                          port_value: 9411
          respect_dns_ttl: true
        last_updated: "2022-08-28T00:41:06.774Z"
    dynamic_active_clusters:
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: BlackHoleCluster
          type: STATIC
          connect_timeout: 10s
        last_updated: "2022-08-28T00:41:07.050Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: InboundPassthroughClusterIpv4
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          upstream_bind_config:
            source_address:
              address: 127.0.0.6
              port_value: 0
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
        last_updated: "2022-08-28T00:41:07.082Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: PassthroughCluster
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
        last_updated: "2022-08-28T00:41:07.050Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: inbound|8070||
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          cleanup_interval: 60s
          upstream_bind_config:
            source_address:
              address: 127.0.0.6
              port_value: 0
          metadata:
            filter_metadata:
              istio:
                services:
                  - host: fortio-server.mark.svc.cluster.local
                    namespace: mark
                    name: fortio-server
        last_updated: "2022-08-28T00:41:07.082Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: inbound|8079||
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          cleanup_interval: 60s
          upstream_bind_config:
            source_address:
              address: 127.0.0.6
              port_value: 0
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: fortio-server
                    namespace: mark
                    host: fortio-server.mark.svc.cluster.local
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
        last_updated: "2022-08-28T00:41:07.082Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: inbound|8080||
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          cleanup_interval: 60s
          upstream_bind_config:
            source_address:
              address: 127.0.0.6
              port_value: 0
          metadata:
            filter_metadata:
              istio:
                services:
                  - namespace: mark
                    name: fortio-server
                    host: fortio-server.mark.svc.cluster.local
        last_updated: "2022-08-28T00:41:07.081Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|10250||kubelet.kube-system.svc.cluster.local
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: kubelet
                    namespace: kube-system
                    host: kubelet.kube-system.svc.cluster.local
                default_original_port: 10250
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
        last_updated: "2022-08-28T00:41:06.981Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|10255||kubelet.kube-system.svc.cluster.local
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 10255
                services:
                  - namespace: kube-system
                    host: kubelet.kube-system.svc.cluster.local
                    name: kubelet
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
        last_updated: "2022-08-28T00:41:06.981Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|1080||go-socks5-proxy.cndt.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|1080||go-socks5-proxy.cndt.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: go-socks5-proxy
                    namespace: cndt
                    host: go-socks5-proxy.cndt.svc.cluster.local
                default_original_port: 1080
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/cndt/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.1080_._.go-socks5-proxy.cndt.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.987Z"
      - version_info: 2022-08-28T00:41:53Z/12
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|14250||jaeger-collector.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|14250||jaeger-collector.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 14250
                services:
                  - host: jaeger-collector.istio-system.svc.cluster.local
                    namespace: istio-system
                    name: jaeger-collector
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.14250_._.jaeger-collector.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:53.329Z"
      - version_info: 2022-08-28T00:41:53Z/12
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|14268||jaeger-collector.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|14268||jaeger-collector.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 14268
                services:
                  - name: jaeger-collector
                    namespace: istio-system
                    host: jaeger-collector.istio-system.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.14268_._.jaeger-collector.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:53.220Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|15010||istiod.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|15010||istiod.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - host: istiod.istio-system.svc.cluster.local
                    name: istiod
                    namespace: istio-system
                default_original_port: 15010
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istiod
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.15010_._.istiod.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:07.001Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|15012||istiod.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|15012||istiod.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 15012
                services:
                  - host: istiod.istio-system.svc.cluster.local
                    name: istiod
                    namespace: istio-system
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istiod
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.15012_._.istiod.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:07.001Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|15014||istiod.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|15014||istiod.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - host: istiod.istio-system.svc.cluster.local
                    name: istiod
                    namespace: istio-system
                default_original_port: 15014
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istiod
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.15014_._.istiod.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:07.002Z"
      - version_info: 2022-08-28T00:41:17Z/11
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: istio-ingressgateway
                    host: istio-ingressgateway.istio-system.svc.cluster.local
                    namespace: istio-system
                default_original_port: 15021
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.15021_._.istio-ingressgateway.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:17.576Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|16379||my-release-2-redis-cluster-headless.monitoring.svc.cluster.local
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - host: my-release-2-redis-cluster-headless.monitoring.svc.cluster.local
                    namespace: monitoring
                    name: my-release-2-redis-cluster-headless
                default_original_port: 16379
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
        last_updated: "2022-08-28T00:41:06.995Z"
      - version_info: 2022-08-28T00:41:11Z/7
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|20001||kiali.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|20001||kiali.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 20001
                services:
                  - host: kiali.istio-system.svc.cluster.local
                    namespace: istio-system
                    name: kiali
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/kiali
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.20001_._.kiali.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:12.255Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|3000||grafana.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|3000||grafana.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: grafana
                    namespace: istio-system
                    host: grafana.istio-system.svc.cluster.local
                default_original_port: 3000
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/grafana
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.3000_._.grafana.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.960Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|4194||kubelet.kube-system.svc.cluster.local
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 4194
                services:
                  - host: kubelet.kube-system.svc.cluster.local
                    name: kubelet
                    namespace: kube-system
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
        last_updated: "2022-08-28T00:41:06.981Z"
      - version_info: 2022-08-28T00:41:17Z/11
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 443
                services:
                  - host: istio-ingressgateway.istio-system.svc.cluster.local
                    namespace: istio-system
                    name: istio-ingressgateway
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.443_._.istio-ingressgateway.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:17.630Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|443||istiod.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|443||istiod.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 443
                services:
                  - namespace: istio-system
                    name: istiod
                    host: istiod.istio-system.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istiod
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.443_._.istiod.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:07.002Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|443||kubernetes.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|443||kubernetes.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 443
                services:
                  - name: kubernetes
                    namespace: default
                    host: kubernetes.default.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.443_._.kubernetes.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.925Z"
      - version_info: 2022-08-28T00:41:13Z/8
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|443||metrics-server.kube-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|443||metrics-server.kube-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - namespace: kube-system
                    host: metrics-server.kube-system.svc.cluster.local
                    name: metrics-server
                default_original_port: 443
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/kube-system/sa/metrics-server
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.443_._.metrics-server.kube-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:14.246Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|53||kube-dns.kube-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|53||kube-dns.kube-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - host: kube-dns.kube-system.svc.cluster.local
                    namespace: kube-system
                    name: kube-dns
                default_original_port: 53
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/kube-system/sa/coredns
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.53_._.kube-dns.kube-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.934Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|6379||my-release-2-redis-cluster-headless.monitoring.svc.cluster.local
          type: ORIGINAL_DST
          connect_timeout: 10s
          lb_policy: CLUSTER_PROVIDED
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 6379
                services:
                  - host: my-release-2-redis-cluster-headless.monitoring.svc.cluster.local
                    namespace: monitoring
                    name: my-release-2-redis-cluster-headless
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
        last_updated: "2022-08-28T00:41:06.991Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|6379||my-release-2-redis-cluster.monitoring.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|6379||my-release-2-redis-cluster.monitoring.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 6379
                services:
                  - namespace: monitoring
                    host: my-release-2-redis-cluster.monitoring.svc.cluster.local
                    name: my-release-2-redis-cluster
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.6379_._.my-release-2-redis-cluster.monitoring.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.996Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8000||httpbin.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8000||httpbin.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - namespace: default
                    host: httpbin.default.svc.cluster.local
                    name: httpbin
                default_original_port: 8000
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8000_._.httpbin.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:07.009Z"
      - version_info: 2022-08-28T00:41:15Z/9
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8000||httpbin.mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8000||httpbin.mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: httpbin
                    host: httpbin.mark.svc.cluster.local
                    namespace: mark
                default_original_port: 8000
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/mark/sa/httpbin
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8000_._.httpbin.mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:16.149Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8070||fortio-server.myprd-mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8070||fortio-server.myprd-mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 8070
                services:
                  - name: fortio-server
                    namespace: myprd-mark
                    host: fortio-server.myprd-mark.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8070_._.fortio-server.myprd-mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.989Z"
      - version_info: 2022-08-28T00:41:09Z/6
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8070||fortio-server.mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8070||fortio-server.mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 8070
                services:
                  - name: fortio-server
                    namespace: mark
                    host: fortio-server.mark.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/mark/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8070_._.fortio-server.mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:10.387Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8079||fortio-server-l2.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8079||fortio-server-l2.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - namespace: default
                    host: fortio-server-l2.default.svc.cluster.local
                    name: fortio-server-l2
                default_original_port: 8079
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8079_._.fortio-server-l2.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.988Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8079||fortio-server-l2.myprd-mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8079||fortio-server-l2.myprd-mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: fortio-server-l2
                    host: fortio-server-l2.myprd-mark.svc.cluster.local
                    namespace: myprd-mark
                default_original_port: 8079
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8079_._.fortio-server-l2.myprd-mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.990Z"
      - version_info: 2022-08-28T00:41:16Z/10
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8079||fortio-server-l2.mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8079||fortio-server-l2.mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 8079
                services:
                  - host: fortio-server-l2.mark.svc.cluster.local
                    namespace: mark
                    name: fortio-server-l2
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/mark/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8079_._.fortio-server-l2.mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:16.610Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8079||fortio-server.myprd-mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8079||fortio-server.myprd-mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - namespace: myprd-mark
                    name: fortio-server
                    host: fortio-server.myprd-mark.svc.cluster.local
                default_original_port: 8079
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8079_._.fortio-server.myprd-mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.990Z"
      - version_info: 2022-08-28T00:41:09Z/6
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8079||fortio-server.mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8079||fortio-server.mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: fortio-server
                    host: fortio-server.mark.svc.cluster.local
                    namespace: mark
                default_original_port: 8079
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/mark/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8079_._.fortio-server.mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:10.414Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8080||fortio-server-l2.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8080||fortio-server-l2.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 8080
                services:
                  - host: fortio-server-l2.default.svc.cluster.local
                    namespace: default
                    name: fortio-server-l2
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8080_._.fortio-server-l2.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.988Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8080||fortio-server-l2.myprd-mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8080||fortio-server-l2.myprd-mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 8080
                services:
                  - namespace: myprd-mark
                    name: fortio-server-l2
                    host: fortio-server-l2.myprd-mark.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8080_._.fortio-server-l2.myprd-mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.990Z"
      - version_info: 2022-08-28T00:41:16Z/10
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8080||fortio-server-l2.mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8080||fortio-server-l2.mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 8080
                services:
                  - namespace: mark
                    host: fortio-server-l2.mark.svc.cluster.local
                    name: fortio-server-l2
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/mark/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8080_._.fortio-server-l2.mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:16.609Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8080||fortio-server.myprd-mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8080||fortio-server.myprd-mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - host: fortio-server.myprd-mark.svc.cluster.local
                    name: fortio-server
                    namespace: myprd-mark
                default_original_port: 8080
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8080_._.fortio-server.myprd-mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.989Z"
      - version_info: 2022-08-28T00:41:09Z/6
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|8080||fortio-server.mark.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|8080||fortio-server.mark.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - name: fortio-server
                    host: fortio-server.mark.svc.cluster.local
                    namespace: mark
                default_original_port: 8080
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/mark/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.8080_._.fortio-server.mark.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:10.320Z"
      - version_info: 2022-08-28T00:41:17Z/11
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|80||istio-ingressgateway.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|80||istio-ingressgateway.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 80
                services:
                  - namespace: istio-system
                    name: istio-ingressgateway
                    host: istio-ingressgateway.istio-system.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              explicit_http_config:
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                      - h2
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.80_._.istio-ingressgateway.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:17.618Z"
      - version_info: 2022-08-28T00:41:53Z/12
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|80||tracing.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|80||tracing.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                services:
                  - namespace: istio-system
                    name: tracing
                    host: tracing.istio-system.svc.cluster.local
                default_original_port: 80
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.80_._.tracing.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:53.208Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9080||details.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9080||details.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9080
                services:
                  - namespace: default
                    name: details
                    host: details.default.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9080_._.details.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.947Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9080||productpage.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9080||productpage.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9080
                services:
                  - host: productpage.default.svc.cluster.local
                    name: productpage
                    namespace: default
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9080_._.productpage.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.949Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9080||ratings.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9080||ratings.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9080
                services:
                  - namespace: default
                    name: ratings
                    host: ratings.default.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9080_._.ratings.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.948Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9080||reviews.default.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9080||reviews.default.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9080
                services:
                  - namespace: default
                    name: reviews
                    host: reviews.default.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9080_._.reviews.default.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.948Z"
      - version_info: 2022-08-28T00:41:11Z/7
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9090||kiali.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9090||kiali.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9090
                services:
                  - name: kiali
                    namespace: istio-system
                    host: kiali.istio-system.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/kiali
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9090_._.kiali.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:12.356Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9090||prometheus.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9090||prometheus.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9090
                services:
                  - name: prometheus
                    namespace: istio-system
                    host: prometheus.istio-system.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context: {}
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9090_._.prometheus.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.980Z"
      - version_info: 2022-08-28T00:41:03Z/5
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9153||kube-dns.kube-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9153||kube-dns.kube-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9153
                services:
                  - name: kube-dns
                    namespace: kube-system
                    host: kube-dns.kube-system.svc.cluster.local
          common_lb_config:
            locality_weighted_lb_config: {}
          typed_extension_protocol_options:
            envoy.extensions.upstreams.http.v3.HttpProtocolOptions:
              '@type': type.googleapis.com/envoy.extensions.upstreams.http.v3.HttpProtocolOptions
              use_downstream_protocol_config:
                http_protocol_options: {}
                http2_protocol_options:
                  max_concurrent_streams: 1073741824
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/kube-system/sa/coredns
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9153_._.kube-dns.kube-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:06.947Z"
      - version_info: 2022-08-28T00:41:53Z/12
        cluster:
          '@type': type.googleapis.com/envoy.config.cluster.v3.Cluster
          name: outbound|9411||zipkin.istio-system.svc.cluster.local
          type: EDS
          eds_cluster_config:
            eds_config:
              ads: {}
              initial_fetch_timeout: 0s
              resource_api_version: V3
            service_name: outbound|9411||zipkin.istio-system.svc.cluster.local
          connect_timeout: 10s
          lb_policy: LEAST_REQUEST
          circuit_breakers:
            thresholds:
              - max_connections: 4294967295
                max_pending_requests: 4294967295
                max_requests: 4294967295
                max_retries: 4294967295
                track_remaining: true
          metadata:
            filter_metadata:
              istio:
                default_original_port: 9411
                services:
                  - namespace: istio-system
                    host: zipkin.istio-system.svc.cluster.local
                    name: zipkin
          common_lb_config:
            locality_weighted_lb_config: {}
          filters:
            - name: istio.metadata_exchange
              typed_config:
                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                protocol: istio-peer-exchange
          transport_socket_matches:
            - name: tlsMode-istio
              match:
                tlsMode: istio
              transport_socket:
                name: envoy.transport_sockets.tls
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.UpstreamTlsContext
                  common_tls_context:
                    tls_params:
                      tls_minimum_protocol_version: TLSv1_2
                      tls_maximum_protocol_version: TLSv1_3
                    alpn_protocols:
                      - istio-peer-exchange
                      - istio
                    tls_certificate_sds_secret_configs:
                      - name: default
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                    combined_validation_context:
                      default_validation_context:
                        match_subject_alt_names:
                          - exact: spiffe://cluster.local/ns/istio-system/sa/default
                      validation_context_sds_secret_config:
                        name: ROOTCA
                        sds_config:
                          api_config_source:
                            api_type: GRPC
                            grpc_services:
                              - envoy_grpc:
                                  cluster_name: sds-grpc
                            set_node_on_first_message_only: true
                            transport_api_version: V3
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                  sni: outbound_.9411_._.zipkin.istio-system.svc.cluster.local
            - name: tlsMode-disabled
              match: {}
              transport_socket:
                name: envoy.transport_sockets.raw_buffer
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.transport_sockets.raw_buffer.v3.RawBuffer
        last_updated: "2022-08-28T00:41:53.219Z"
  - '@type': type.googleapis.com/envoy.admin.v3.EndpointsConfigDump
    static_endpoint_configs:
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: xds-grpc
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      pipe:
                        path: ./etc/istio/proxy/XDS
                    health_check_config: {}
                  health_status: HEALTHY
                  load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: zipkin
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 10.97.176.41
                        port_value: 9411
                    health_check_config: {}
                    hostname: zipkin.istio-system
                  health_status: HEALTHY
                  metadata: {}
                  load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: agent
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 127.0.0.1
                        port_value: 15020
                    health_check_config: {}
                  health_status: HEALTHY
                  load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: sds-grpc
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      pipe:
                        path: ./var/run/secrets/workload-spiffe-uds/socket
                    health_check_config: {}
                  health_status: HEALTHY
                  load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: prometheus_stats
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 127.0.0.1
                        port_value: 15000
                    health_check_config: {}
                  health_status: HEALTHY
                  load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
    dynamic_endpoint_configs:
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|14250||jaeger-collector.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.156
                        port_value: 14250
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: jaeger;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: inbound|8079||
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8000||httpbin.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|15014||istiod.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.154
                        port_value: 15014
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istiod;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|80||tracing.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.156
                        port_value: 16686
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: jaeger;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9080||ratings.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9090||kiali.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.137
                        port_value: 9090
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: kiali;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9090||prometheus.istio-system.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.143
                        port_value: 15021
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istio-ingressgateway;istio-system;istio-ingressgateway;latest;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8070||fortio-server.myprd-mark.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8080||fortio-server.myprd-mark.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8079||fortio-server.mark.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.230
                        port_value: 8079
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: fortio-server;mark;fortio-server;latest;Kubernetes
                      envoy.transport_socket_match:
                        tlsMode: istio
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: inbound|8070||
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|4194||kubelet.kube-system.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8000||httpbin.mark.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.236
                        port_value: 80
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      envoy.transport_socket_match:
                        tlsMode: istio
                      istio:
                        workload: httpbin;mark;httpbin;v1;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.143
                        port_value: 8443
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istio-ingressgateway;istio-system;istio-ingressgateway;latest;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|53||kube-dns.kube-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.234
                        port_value: 53
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: coredns;kube-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.151
                        port_value: 53
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: coredns;kube-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8079||fortio-server-l2.myprd-mark.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8079||fortio-server-l2.mark.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.227
                        port_value: 8079
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      envoy.transport_socket_match:
                        tlsMode: istio
                      istio:
                        workload: fortio-server-l2;mark;fortio-server-l2;latest;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9080||productpage.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|10255||kubelet.kube-system.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|15010||istiod.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.154
                        port_value: 15010
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istiod;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|443||kubernetes.default.svc.cluster.local
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 192.168.122.51
                        port_value: 6443
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: ;;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|443||istiod.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.154
                        port_value: 15017
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istiod;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9080||reviews.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8070||fortio-server.mark.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.230
                        port_value: 8070
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      envoy.transport_socket_match:
                        tlsMode: istio
                      istio:
                        workload: fortio-server;mark;fortio-server;latest;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8080||fortio-server-l2.myprd-mark.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8080||fortio-server.mark.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.230
                        port_value: 8080
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: fortio-server;mark;fortio-server;latest;Kubernetes
                      envoy.transport_socket_match:
                        tlsMode: istio
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: inbound|8080||
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|80||istio-ingressgateway.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.143
                        port_value: 8080
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istio-ingressgateway;istio-system;istio-ingressgateway;latest;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9411||zipkin.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.156
                        port_value: 9411
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: jaeger;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9153||kube-dns.kube-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.234
                        port_value: 9153
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: coredns;kube-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.151
                        port_value: 9153
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: coredns;kube-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8079||fortio-server.myprd-mark.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8080||fortio-server-l2.mark.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.227
                        port_value: 8080
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      envoy.transport_socket_match:
                        tlsMode: istio
                      istio:
                        workload: fortio-server-l2;mark;fortio-server-l2;latest;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|9080||details.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|10250||kubelet.kube-system.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|14268||jaeger-collector.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.156
                        port_value: 14268
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: jaeger;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|6379||my-release-2-redis-cluster.monitoring.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|1080||go-socks5-proxy.cndt.svc.cluster.local
          endpoints:
            - locality: {}
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.16.140.205
                        port_value: 1080
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: go-socks5-proxy;cndt;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|20001||kiali.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.137
                        port_value: 20001
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: kiali;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|3000||grafana.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-1
                zone: worker005
                sub_zone: worker005
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.21.206.237
                        port_value: 3000
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: grafana;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8079||fortio-server-l2.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|8080||fortio-server-l2.default.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|16379||my-release-2-redis-cluster-headless.monitoring.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|6379||my-release-2-redis-cluster-headless.monitoring.svc.cluster.local
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: BlackHoleCluster
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|443||metrics-server.kube-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.152
                        port_value: 4443
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: metrics-server;kube-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: InboundPassthroughClusterIpv4
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: outbound|15012||istiod.istio-system.svc.cluster.local
          endpoints:
            - locality:
                region: us-east-6
                zone: worker006
                sub_zone: worker006
              lb_endpoints:
                - endpoint:
                    address:
                      socket_address:
                        address: 172.30.207.154
                        port_value: 15012
                    health_check_config: {}
                  health_status: HEALTHY
                  metadata:
                    filter_metadata:
                      istio:
                        workload: istiod;istio-system;;;Kubernetes
                  load_balancing_weight: 1
              load_balancing_weight: 1
          policy:
            overprovisioning_factor: 140
      - endpoint_config:
          '@type': type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment
          cluster_name: PassthroughCluster
          policy:
            overprovisioning_factor: 140
  - '@type': type.googleapis.com/envoy.admin.v3.ListenersConfigDump
    version_info: 2022-08-28T00:41:03Z/5
    static_listeners:
      - listener:
          '@type': type.googleapis.com/envoy.config.listener.v3.Listener
          address:
            socket_address:
              address: 0.0.0.0
              port_value: 15090
          filter_chains:
            - filters:
                - name: envoy.filters.network.http_connection_manager
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                    stat_prefix: stats
                    route_config:
                      virtual_hosts:
                        - name: backend
                          domains:
                            - '*'
                          routes:
                            - match:
                                prefix: /stats/prometheus
                              route:
                                cluster: prometheus_stats
                    http_filters:
                      - name: envoy.filters.http.router
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
        last_updated: "2022-08-28T00:41:06.820Z"
      - listener:
          '@type': type.googleapis.com/envoy.config.listener.v3.Listener
          address:
            socket_address:
              address: 0.0.0.0
              port_value: 15021
          filter_chains:
            - filters:
                - name: envoy.filters.network.http_connection_manager
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                    stat_prefix: agent
                    route_config:
                      virtual_hosts:
                        - name: backend
                          domains:
                            - '*'
                          routes:
                            - match:
                                prefix: /healthz/ready
                              route:
                                cluster: agent
                    http_filters:
                      - name: envoy.filters.http.router
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
        last_updated: "2022-08-28T00:41:06.821Z"
    dynamic_listeners:
      - name: 10.104.76.155_443
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.104.76.155_443
            address:
              socket_address:
                address: 10.104.76.155
                port_value: 443
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|443||metrics-server.kube-system.svc.cluster.local
                      cluster: outbound|443||metrics-server.kube-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.813Z"
      - name: 192.168.122.53_10250
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.53_10250
            address:
              socket_address:
                address: 192.168.122.53
                port_value: 10250
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|10250||kubelet.kube-system.svc.cluster.local
                      cluster: outbound|10250||kubelet.kube-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.813Z"
      - name: 10.108.56.118_443
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.108.56.118_443
            address:
              socket_address:
                address: 10.108.56.118
                port_value: 443
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|443||istiod.istio-system.svc.cluster.local
                      cluster: outbound|443||istiod.istio-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.839Z"
      - name: 10.98.94.185_443
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.98.94.185_443
            address:
              socket_address:
                address: 10.98.94.185
                port_value: 443
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
                      cluster: outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.880Z"
      - name: 192.168.122.52_10250
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.52_10250
            address:
              socket_address:
                address: 192.168.122.52
                port_value: 10250
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|10250||kubelet.kube-system.svc.cluster.local
                      cluster: outbound|10250||kubelet.kube-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.880Z"
      - name: 192.168.122.51_10250
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.51_10250
            address:
              socket_address:
                address: 192.168.122.51
                port_value: 10250
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|10250||kubelet.kube-system.svc.cluster.local
                      cluster: outbound|10250||kubelet.kube-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.881Z"
      - name: 192.168.122.54_10250
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.54_10250
            address:
              socket_address:
                address: 192.168.122.54
                port_value: 10250
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|10250||kubelet.kube-system.svc.cluster.local
                      cluster: outbound|10250||kubelet.kube-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.881Z"
      - name: 10.96.0.1_443
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.96.0.1_443
            address:
              socket_address:
                address: 10.96.0.1
                port_value: 443
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|443||kubernetes.default.svc.cluster.local
                      cluster: outbound|443||kubernetes.default.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.881Z"
      - name: 10.108.56.118_15012
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.108.56.118_15012
            address:
              socket_address:
                address: 10.108.56.118
                port_value: 15012
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|15012||istiod.istio-system.svc.cluster.local
                      cluster: outbound|15012||istiod.istio-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.882Z"
      - name: 10.104.39.252_6379
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.104.39.252_6379
            address:
              socket_address:
                address: 10.104.39.252
                port_value: 6379
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|6379||my-release-2-redis-cluster.monitoring.svc.cluster.local
                      cluster: outbound|6379||my-release-2-redis-cluster.monitoring.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.882Z"
      - name: 10.96.0.10_53
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.96.0.10_53
            address:
              socket_address:
                address: 10.96.0.10
                port_value: 53
            filter_chains:
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: outbound|53||kube-dns.kube-system.svc.cluster.local
                      cluster: outbound|53||kube-dns.kube-system.svc.cluster.local
            traffic_direction: OUTBOUND
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.934Z"
      - name: 192.168.122.51_4194
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.51_4194
            address:
              socket_address:
                address: 192.168.122.51
                port_value: 4194
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_192.168.122.51_4194
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: kubelet.kube-system.svc.cluster.local:4194
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|4194||kubelet.kube-system.svc.cluster.local
                    cluster: outbound|4194||kubelet.kube-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.943Z"
      - name: 0.0.0.0_15010
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_15010
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 15010
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_15010
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "15010"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.grpc_stats
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig
                            emit_filter_state: true
                            stats_for_all_methods: false
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.944Z"
      - name: 0.0.0.0_8000
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_8000
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 8000
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_8000
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "8000"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.975Z"
      - name: 192.168.122.53_4194
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.53_4194
            address:
              socket_address:
                address: 192.168.122.53
                port_value: 4194
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_192.168.122.53_4194
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: kubelet.kube-system.svc.cluster.local:4194
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|4194||kubelet.kube-system.svc.cluster.local
                    cluster: outbound|4194||kubelet.kube-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.977Z"
      - name: 0.0.0.0_8070
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_8070
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 8070
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_8070
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "8070"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:07.978Z"
      - name: 10.96.0.10_9153
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.96.0.10_9153
            address:
              socket_address:
                address: 10.96.0.10
                port_value: 9153
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_10.96.0.10_9153
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: kube-dns.kube-system.svc.cluster.local:9153
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|9153||kube-dns.kube-system.svc.cluster.local
                    cluster: outbound|9153||kube-dns.kube-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.004Z"
      - name: 0.0.0.0_9411
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_9411
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 9411
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_9411
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "9411"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.101Z"
      - name: 10.98.217.187_14268
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.98.217.187_14268
            address:
              socket_address:
                address: 10.98.217.187
                port_value: 14268
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_10.98.217.187_14268
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: jaeger-collector.istio-system.svc.cluster.local:14268
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|14268||jaeger-collector.istio-system.svc.cluster.local
                    cluster: outbound|14268||jaeger-collector.istio-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.102Z"
      - name: 10.98.94.185_15021
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.98.94.185_15021
            address:
              socket_address:
                address: 10.98.94.185
                port_value: 15021
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_10.98.94.185_15021
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: istio-ingressgateway.istio-system.svc.cluster.local:15021
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
                    cluster: outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.110Z"
      - name: 10.100.143.36_3000
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.100.143.36_3000
            address:
              socket_address:
                address: 10.100.143.36
                port_value: 3000
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_10.100.143.36_3000
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: grafana.istio-system.svc.cluster.local:3000
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|3000||grafana.istio-system.svc.cluster.local
                    cluster: outbound|3000||grafana.istio-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.158Z"
      - name: 192.168.122.52_4194
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.52_4194
            address:
              socket_address:
                address: 192.168.122.52
                port_value: 4194
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_192.168.122.52_4194
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: kubelet.kube-system.svc.cluster.local:4194
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|4194||kubelet.kube-system.svc.cluster.local
                    cluster: outbound|4194||kubelet.kube-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.175Z"
      - name: 0.0.0.0_9080
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_9080
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 9080
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_9080
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "9080"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.233Z"
      - name: 10.98.217.187_14250
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 10.98.217.187_14250
            address:
              socket_address:
                address: 10.98.217.187
                port_value: 14250
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_10.98.217.187_14250
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: jaeger-collector.istio-system.svc.cluster.local:14250
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|14250||jaeger-collector.istio-system.svc.cluster.local
                    cluster: outbound|14250||jaeger-collector.istio-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.234Z"
      - name: 0.0.0.0_20001
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_20001
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 20001
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_20001
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "20001"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.240Z"
      - name: 0.0.0.0_8080
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_8080
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 8080
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_8080
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "8080"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.258Z"
      - name: 0.0.0.0_80
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_80
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 80
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_80
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "80"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.266Z"
      - name: 0.0.0.0_10255
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_10255
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 10255
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_10255
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "10255"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.297Z"
      - name: 0.0.0.0_8079
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_8079
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 8079
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_8079
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "8079"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.grpc_stats
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig
                            emit_filter_state: true
                            stats_for_all_methods: false
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.310Z"
      - name: 0.0.0.0_9090
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_9090
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 9090
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_9090
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "9090"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.324Z"
      - name: 192.168.122.54_4194
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 192.168.122.54_4194
            address:
              socket_address:
                address: 192.168.122.54
                port_value: 4194
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_192.168.122.54_4194
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: kubelet.kube-system.svc.cluster.local:4194
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: outbound|4194||kubelet.kube-system.svc.cluster.local
                    cluster: outbound|4194||kubelet.kube-system.svc.cluster.local
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.358Z"
      - name: 0.0.0.0_1080
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_1080
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 1080
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_1080
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "1080"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.380Z"
      - name: 0.0.0.0_15014
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: 0.0.0.0_15014
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 15014
            filter_chains:
              - filter_chain_match:
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: outbound_0.0.0.0_15014
                      rds:
                        config_source:
                          ads: {}
                          initial_fetch_timeout: 0s
                          resource_api_version: V3
                        route_config_name: "15014"
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: istio.alpn
                          typed_config:
                            '@type': type.googleapis.com/istio.envoy.config.filter.http.alpn.v2alpha1.FilterConfig
                            alpn_override:
                              - alpn_override:
                                  - istio-http/1.0
                                  - istio
                                  - http/1.0
                              - upstream_protocol: HTTP11
                                alpn_override:
                                  - istio-http/1.1
                                  - istio
                                  - http/1.1
                              - upstream_protocol: HTTP2
                                alpn_override:
                                  - istio-h2
                                  - istio
                                  - h2
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_outbound
                                vm_config:
                                  vm_id: stats_outbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio"
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      use_remote_address: false
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
            listener_filters:
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
            listener_filters_timeout: 0s
            traffic_direction: OUTBOUND
            continue_on_listener_filters_timeout: true
            default_filter_chain:
              filter_chain_match: {}
              filters:
                - name: istio.stats
                  typed_config:
                    '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                    type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                    value:
                      config:
                        root_id: stats_outbound
                        vm_config:
                          vm_id: tcp_stats_outbound
                          runtime: envoy.wasm.runtime.null
                          code:
                            local:
                              inline_string: envoy.wasm.stats
                        configuration:
                          '@type': type.googleapis.com/google.protobuf.StringValue
                          value: |
                            {
                              "debug": "false",
                              "stat_prefix": "istio"
                            }
                - name: envoy.filters.network.tcp_proxy
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                    stat_prefix: PassthroughCluster
                    cluster: PassthroughCluster
                    idle_timeout: 0s
              name: PassthroughFilterChain
            bind_to_port: false
          last_updated: "2022-08-28T00:41:08.381Z"
      - name: virtualOutbound
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: virtualOutbound
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 15001
            filter_chains:
              - filter_chain_match:
                  destination_port: 15001
                filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: BlackHoleCluster
                      cluster: BlackHoleCluster
                name: virtualOutbound-blackhole
              - filters:
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_outbound
                          vm_config:
                            vm_id: tcp_stats_outbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio"
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: PassthroughCluster
                      cluster: PassthroughCluster
                      idle_timeout: 0s
                name: virtualOutbound-catchall-tcp
            use_original_dst: true
            traffic_direction: OUTBOUND
          last_updated: "2022-08-28T00:41:08.382Z"
      - name: virtualInbound
        active_state:
          version_info: 2022-08-28T00:41:03Z/5
          listener:
            '@type': type.googleapis.com/envoy.config.listener.v3.Listener
            name: virtualInbound
            address:
              socket_address:
                address: 0.0.0.0
                port_value: 15006
            filter_chains:
              - filter_chain_match:
                  destination_port: 15006
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_inbound
                          vm_config:
                            vm_id: tcp_stats_inbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio",
                                "metrics": [
                                  {
                                    "dimensions": {
                                      "destination_cluster": "node.metadata['CLUSTER_ID']",
                                      "source_cluster": "downstream_peer.cluster_id"
                                    }
                                  }
                                ]
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: BlackHoleCluster
                      cluster: BlackHoleCluster
                name: virtualInbound-blackhole
              - filter_chain_match:
                  prefix_ranges:
                    - address_prefix: 0.0.0.0
                      prefix_len: 0
                  transport_protocol: tls
                  application_protocols:
                    - istio-http/1.0
                    - istio-http/1.1
                    - istio-h2
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: InboundPassthroughClusterIpv4
                      route_config:
                        name: InboundPassthroughClusterIpv4
                        virtual_hosts:
                          - name: inbound|http|0
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: InboundPassthroughClusterIpv4
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: :0/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                transport_socket:
                  name: envoy.transport_sockets.tls
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
                    common_tls_context:
                      tls_params:
                        tls_minimum_protocol_version: TLSv1_2
                        tls_maximum_protocol_version: TLSv1_3
                        cipher_suites:
                          - ECDHE-ECDSA-AES256-GCM-SHA384
                          - ECDHE-RSA-AES256-GCM-SHA384
                          - ECDHE-ECDSA-AES128-GCM-SHA256
                          - ECDHE-RSA-AES128-GCM-SHA256
                          - AES256-GCM-SHA384
                          - AES128-GCM-SHA256
                      alpn_protocols:
                        - h2
                        - http/1.1
                      tls_certificate_sds_secret_configs:
                        - name: default
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                      combined_validation_context:
                        default_validation_context:
                          match_subject_alt_names:
                            - prefix: spiffe://cluster.local/
                        validation_context_sds_secret_config:
                          name: ROOTCA
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                    require_client_certificate: true
                name: virtualInbound-catchall-http
              - filter_chain_match:
                  prefix_ranges:
                    - address_prefix: 0.0.0.0
                      prefix_len: 0
                  transport_protocol: raw_buffer
                  application_protocols:
                    - http/1.1
                    - h2c
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: InboundPassthroughClusterIpv4
                      route_config:
                        name: InboundPassthroughClusterIpv4
                        virtual_hosts:
                          - name: inbound|http|0
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: InboundPassthroughClusterIpv4
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: :0/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                name: virtualInbound-catchall-http
              - filter_chain_match:
                  prefix_ranges:
                    - address_prefix: 0.0.0.0
                      prefix_len: 0
                  transport_protocol: tls
                  application_protocols:
                    - istio-peer-exchange
                    - istio
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_inbound
                          vm_config:
                            vm_id: tcp_stats_inbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio",
                                "metrics": [
                                  {
                                    "dimensions": {
                                      "destination_cluster": "node.metadata['CLUSTER_ID']",
                                      "source_cluster": "downstream_peer.cluster_id"
                                    }
                                  }
                                ]
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: InboundPassthroughClusterIpv4
                      cluster: InboundPassthroughClusterIpv4
                transport_socket:
                  name: envoy.transport_sockets.tls
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
                    common_tls_context:
                      tls_params:
                        tls_minimum_protocol_version: TLSv1_2
                        tls_maximum_protocol_version: TLSv1_3
                        cipher_suites:
                          - ECDHE-ECDSA-AES256-GCM-SHA384
                          - ECDHE-RSA-AES256-GCM-SHA384
                          - ECDHE-ECDSA-AES128-GCM-SHA256
                          - ECDHE-RSA-AES128-GCM-SHA256
                          - AES256-GCM-SHA384
                          - AES128-GCM-SHA256
                      alpn_protocols:
                        - istio-peer-exchange
                        - h2
                        - http/1.1
                      tls_certificate_sds_secret_configs:
                        - name: default
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                      combined_validation_context:
                        default_validation_context:
                          match_subject_alt_names:
                            - prefix: spiffe://cluster.local/
                        validation_context_sds_secret_config:
                          name: ROOTCA
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                    require_client_certificate: true
                name: virtualInbound
              - filter_chain_match:
                  prefix_ranges:
                    - address_prefix: 0.0.0.0
                      prefix_len: 0
                  transport_protocol: raw_buffer
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_inbound
                          vm_config:
                            vm_id: tcp_stats_inbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio",
                                "metrics": [
                                  {
                                    "dimensions": {
                                      "destination_cluster": "node.metadata['CLUSTER_ID']",
                                      "source_cluster": "downstream_peer.cluster_id"
                                    }
                                  }
                                ]
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: InboundPassthroughClusterIpv4
                      cluster: InboundPassthroughClusterIpv4
                name: virtualInbound
              - filter_chain_match:
                  prefix_ranges:
                    - address_prefix: 0.0.0.0
                      prefix_len: 0
                  transport_protocol: tls
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: istio.stats
                    typed_config:
                      '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                      type_url: type.googleapis.com/envoy.extensions.filters.network.wasm.v3.Wasm
                      value:
                        config:
                          root_id: stats_inbound
                          vm_config:
                            vm_id: tcp_stats_inbound
                            runtime: envoy.wasm.runtime.null
                            code:
                              local:
                                inline_string: envoy.wasm.stats
                          configuration:
                            '@type': type.googleapis.com/google.protobuf.StringValue
                            value: |
                              {
                                "debug": "false",
                                "stat_prefix": "istio",
                                "metrics": [
                                  {
                                    "dimensions": {
                                      "destination_cluster": "node.metadata['CLUSTER_ID']",
                                      "source_cluster": "downstream_peer.cluster_id"
                                    }
                                  }
                                ]
                              }
                  - name: envoy.filters.network.tcp_proxy
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.tcp_proxy.v3.TcpProxy
                      stat_prefix: InboundPassthroughClusterIpv4
                      cluster: InboundPassthroughClusterIpv4
                name: virtualInbound
              - filter_chain_match:
                  destination_port: 8070
                  transport_protocol: tls
                  application_protocols:
                    - istio
                    - istio-peer-exchange
                    - istio-http/1.0
                    - istio-http/1.1
                    - istio-h2
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: inbound_0.0.0.0_8070
                      route_config:
                        name: inbound|8070||
                        virtual_hosts:
                          - name: inbound|http|8070
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: inbound|8070||
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: fortio-server.mark.svc.cluster.local:8070/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                transport_socket:
                  name: envoy.transport_sockets.tls
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
                    common_tls_context:
                      tls_params:
                        tls_minimum_protocol_version: TLSv1_2
                        tls_maximum_protocol_version: TLSv1_3
                        cipher_suites:
                          - ECDHE-ECDSA-AES256-GCM-SHA384
                          - ECDHE-RSA-AES256-GCM-SHA384
                          - ECDHE-ECDSA-AES128-GCM-SHA256
                          - ECDHE-RSA-AES128-GCM-SHA256
                          - AES256-GCM-SHA384
                          - AES128-GCM-SHA256
                      alpn_protocols:
                        - h2
                        - http/1.1
                      tls_certificate_sds_secret_configs:
                        - name: default
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                      combined_validation_context:
                        default_validation_context:
                          match_subject_alt_names:
                            - prefix: spiffe://cluster.local/
                        validation_context_sds_secret_config:
                          name: ROOTCA
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                    require_client_certificate: true
                name: 0.0.0.0_8070
              - filter_chain_match:
                  destination_port: 8070
                  transport_protocol: raw_buffer
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: inbound_0.0.0.0_8070
                      route_config:
                        name: inbound|8070||
                        virtual_hosts:
                          - name: inbound|http|8070
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: inbound|8070||
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: fortio-server.mark.svc.cluster.local:8070/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                name: 0.0.0.0_8070
              - filter_chain_match:
                  destination_port: 8079
                  transport_protocol: tls
                  application_protocols:
                    - istio
                    - istio-peer-exchange
                    - istio-http/1.0
                    - istio-http/1.1
                    - istio-h2
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: inbound_0.0.0.0_8079
                      route_config:
                        name: inbound|8079||
                        virtual_hosts:
                          - name: inbound|http|8079
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: inbound|8079||
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: fortio-server.mark.svc.cluster.local:8079/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.grpc_stats
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig
                            emit_filter_state: true
                            stats_for_all_methods: false
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      http2_protocol_options: {}
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                transport_socket:
                  name: envoy.transport_sockets.tls
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
                    common_tls_context:
                      tls_params:
                        tls_minimum_protocol_version: TLSv1_2
                        tls_maximum_protocol_version: TLSv1_3
                        cipher_suites:
                          - ECDHE-ECDSA-AES256-GCM-SHA384
                          - ECDHE-RSA-AES256-GCM-SHA384
                          - ECDHE-ECDSA-AES128-GCM-SHA256
                          - ECDHE-RSA-AES128-GCM-SHA256
                          - AES256-GCM-SHA384
                          - AES128-GCM-SHA256
                      alpn_protocols:
                        - h2
                        - http/1.1
                      tls_certificate_sds_secret_configs:
                        - name: default
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                      combined_validation_context:
                        default_validation_context:
                          match_subject_alt_names:
                            - prefix: spiffe://cluster.local/
                        validation_context_sds_secret_config:
                          name: ROOTCA
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                    require_client_certificate: true
                name: 0.0.0.0_8079
              - filter_chain_match:
                  destination_port: 8079
                  transport_protocol: raw_buffer
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: inbound_0.0.0.0_8079
                      route_config:
                        name: inbound|8079||
                        virtual_hosts:
                          - name: inbound|http|8079
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: inbound|8079||
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: fortio-server.mark.svc.cluster.local:8079/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.grpc_stats
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.grpc_stats.v3.FilterConfig
                            emit_filter_state: true
                            stats_for_all_methods: false
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      http2_protocol_options: {}
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                name: 0.0.0.0_8079
              - filter_chain_match:
                  destination_port: 8080
                  transport_protocol: tls
                  application_protocols:
                    - istio
                    - istio-peer-exchange
                    - istio-http/1.0
                    - istio-http/1.1
                    - istio-h2
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: inbound_0.0.0.0_8080
                      route_config:
                        name: inbound|8080||
                        virtual_hosts:
                          - name: inbound|http|8080
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: inbound|8080||
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: fortio-server.mark.svc.cluster.local:8080/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                transport_socket:
                  name: envoy.transport_sockets.tls
                  typed_config:
                    '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.DownstreamTlsContext
                    common_tls_context:
                      tls_params:
                        tls_minimum_protocol_version: TLSv1_2
                        tls_maximum_protocol_version: TLSv1_3
                        cipher_suites:
                          - ECDHE-ECDSA-AES256-GCM-SHA384
                          - ECDHE-RSA-AES256-GCM-SHA384
                          - ECDHE-ECDSA-AES128-GCM-SHA256
                          - ECDHE-RSA-AES128-GCM-SHA256
                          - AES256-GCM-SHA384
                          - AES128-GCM-SHA256
                      alpn_protocols:
                        - h2
                        - http/1.1
                      tls_certificate_sds_secret_configs:
                        - name: default
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                      combined_validation_context:
                        default_validation_context:
                          match_subject_alt_names:
                            - prefix: spiffe://cluster.local/
                        validation_context_sds_secret_config:
                          name: ROOTCA
                          sds_config:
                            api_config_source:
                              api_type: GRPC
                              grpc_services:
                                - envoy_grpc:
                                    cluster_name: sds-grpc
                              set_node_on_first_message_only: true
                              transport_api_version: V3
                            initial_fetch_timeout: 0s
                            resource_api_version: V3
                    require_client_certificate: true
                name: 0.0.0.0_8080
              - filter_chain_match:
                  destination_port: 8080
                  transport_protocol: raw_buffer
                filters:
                  - name: istio.metadata_exchange
                    typed_config:
                      '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                      protocol: istio-peer-exchange
                  - name: envoy.filters.network.http_connection_manager
                    typed_config:
                      '@type': type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
                      stat_prefix: inbound_0.0.0.0_8080
                      route_config:
                        name: inbound|8080||
                        virtual_hosts:
                          - name: inbound|http|8080
                            domains:
                              - '*'
                            routes:
                              - match:
                                  prefix: /
                                route:
                                  cluster: inbound|8080||
                                  timeout: 0s
                                  max_stream_duration:
                                    max_stream_duration: 0s
                                    grpc_timeout_header_max: 0s
                                decorator:
                                  operation: fortio-server.mark.svc.cluster.local:8080/*
                                name: default
                        validate_clusters: false
                      http_filters:
                        - name: istio.metadata_exchange
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            config:
                              vm_config:
                                runtime: envoy.wasm.runtime.null
                                code:
                                  local:
                                    inline_string: envoy.wasm.metadata_exchange
                              configuration:
                                '@type': type.googleapis.com/envoy.tcp.metadataexchange.config.MetadataExchange
                        - name: envoy.filters.http.fault
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.fault.v3.HTTPFault
                        - name: envoy.filters.http.cors
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.cors.v3.Cors
                        - name: istio.stats
                          typed_config:
                            '@type': type.googleapis.com/udpa.type.v1.TypedStruct
                            type_url: type.googleapis.com/envoy.extensions.filters.http.wasm.v3.Wasm
                            value:
                              config:
                                root_id: stats_inbound
                                vm_config:
                                  vm_id: stats_inbound
                                  runtime: envoy.wasm.runtime.null
                                  code:
                                    local:
                                      inline_string: envoy.wasm.stats
                                configuration:
                                  '@type': type.googleapis.com/google.protobuf.StringValue
                                  value: |
                                    {
                                      "debug": "false",
                                      "stat_prefix": "istio",
                                      "disable_host_header_fallback": true,
                                      "metrics": [
                                        {
                                          "dimensions": {
                                            "destination_cluster": "node.metadata['CLUSTER_ID']",
                                            "source_cluster": "downstream_peer.cluster_id"
                                          }
                                        }
                                      ]
                                    }
                        - name: envoy.filters.http.router
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.filters.http.router.v3.Router
                      tracing:
                        client_sampling:
                          value: 100
                        random_sampling:
                          value: 1
                        overall_sampling:
                          value: 100
                        custom_tags:
                          - tag: istio.authorization.dry_run.allow_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.allow_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_allow_shadow_engine_result
                          - tag: istio.authorization.dry_run.deny_policy.name
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_effective_policy_id
                          - tag: istio.authorization.dry_run.deny_policy.result
                            metadata:
                              kind:
                                request: {}
                              metadata_key:
                                key: envoy.filters.http.rbac
                                path:
                                  - key: istio_dry_run_deny_shadow_engine_result
                          - tag: istio.canonical_revision
                            literal:
                              value: latest
                          - tag: istio.canonical_service
                            literal:
                              value: fortio-server
                          - tag: istio.mesh_id
                            literal:
                              value: cluster.local
                          - tag: istio.namespace
                            literal:
                              value: mark
                      server_name: istio-envoy
                      use_remote_address: false
                      forward_client_cert_details: APPEND_FORWARD
                      set_current_client_cert_details:
                        subject: true
                        dns: true
                        uri: true
                      upgrade_configs:
                        - upgrade_type: websocket
                      stream_idle_timeout: 0s
                      normalize_path: true
                      request_id_extension:
                        typed_config:
                          '@type': type.googleapis.com/envoy.extensions.request_id.uuid.v3.UuidRequestIdConfig
                          use_request_id_for_trace_sampling: true
                      path_with_escaped_slashes_action: KEEP_UNCHANGED
                name: 0.0.0.0_8080
            listener_filters:
              - name: envoy.filters.listener.original_dst
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.original_dst.v3.OriginalDst
              - name: envoy.filters.listener.tls_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.tls_inspector.v3.TlsInspector
                filter_disabled:
                  destination_port_range:
                    start: 15006
                    end: 15007
              - name: envoy.filters.listener.http_inspector
                typed_config:
                  '@type': type.googleapis.com/envoy.extensions.filters.listener.http_inspector.v3.HttpInspector
                filter_disabled:
                  or_match:
                    rules:
                      - destination_port_range:
                          start: 8070
                          end: 8071
                      - destination_port_range:
                          start: 8079
                          end: 8080
                      - destination_port_range:
                          start: 8080
                          end: 8081
                      - destination_port_range:
                          start: 15006
                          end: 15007
            listener_filters_timeout: 0s
            traffic_direction: INBOUND
            continue_on_listener_filters_timeout: true
          last_updated: "2022-08-28T00:41:08.874Z"
  - '@type': type.googleapis.com/envoy.admin.v3.ScopedRoutesConfigDump
  - '@type': type.googleapis.com/envoy.admin.v3.RoutesConfigDump
    static_route_configs:
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: inbound|8079||
          virtual_hosts:
            - name: inbound|http|8079
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: inbound|8079||
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8079/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.746Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: inbound|8079||
          virtual_hosts:
            - name: inbound|http|8079
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: inbound|8079||
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8079/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.745Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: inbound|8070||
          virtual_hosts:
            - name: inbound|http|8070
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: inbound|8070||
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8070/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.707Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          virtual_hosts:
            - name: backend
              domains:
                - '*'
              routes:
                - match:
                    prefix: /healthz/ready
                  route:
                    cluster: agent
        last_updated: "2022-08-28T00:41:06.821Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: InboundPassthroughClusterIpv4
          virtual_hosts:
            - name: inbound|http|0
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: InboundPassthroughClusterIpv4
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: :0/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.593Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          virtual_hosts:
            - name: backend
              domains:
                - '*'
              routes:
                - match:
                    prefix: /stats/prometheus
                  route:
                    cluster: prometheus_stats
        last_updated: "2022-08-28T00:41:06.804Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: inbound|8080||
          virtual_hosts:
            - name: inbound|http|8080
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: inbound|8080||
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8080/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.776Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: InboundPassthroughClusterIpv4
          virtual_hosts:
            - name: inbound|http|0
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: InboundPassthroughClusterIpv4
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: :0/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.553Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: inbound|8070||
          virtual_hosts:
            - name: inbound|http|8070
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: inbound|8070||
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8070/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.650Z"
      - route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: inbound|8080||
          virtual_hosts:
            - name: inbound|http|8080
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: inbound|8080||
                    timeout: 0s
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8080/*
                  name: default
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.856Z"
    dynamic_route_configs:
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: grafana.istio-system.svc.cluster.local:3000
          virtual_hosts:
            - name: grafana.istio-system.svc.cluster.local:3000
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|3000||grafana.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: grafana.istio-system.svc.cluster.local:3000/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "15014"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: istiod.istio-system.svc.cluster.local:15014
              domains:
                - istiod.istio-system.svc.cluster.local
                - istiod.istio-system.svc.cluster.local:15014
                - istiod.istio-system
                - istiod.istio-system:15014
                - istiod.istio-system.svc
                - istiod.istio-system.svc:15014
                - 10.108.56.118
                - 10.108.56.118:15014
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|15014||istiod.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: istiod.istio-system.svc.cluster.local:15014/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.951Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: kube-dns.kube-system.svc.cluster.local:9153
          virtual_hosts:
            - name: kube-dns.kube-system.svc.cluster.local:9153
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9153||kube-dns.kube-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: kube-dns.kube-system.svc.cluster.local:9153/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "9090"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: kiali.istio-system.svc.cluster.local:9090
              domains:
                - kiali.istio-system.svc.cluster.local
                - kiali.istio-system.svc.cluster.local:9090
                - kiali.istio-system
                - kiali.istio-system:9090
                - kiali.istio-system.svc
                - kiali.istio-system.svc:9090
                - 10.101.226.77
                - 10.101.226.77:9090
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9090||kiali.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: kiali.istio-system.svc.cluster.local:9090/*
                  name: default
              include_request_attempt_count: true
            - name: prometheus.istio-system.svc.cluster.local:9090
              domains:
                - prometheus.istio-system.svc.cluster.local
                - prometheus.istio-system.svc.cluster.local:9090
                - prometheus.istio-system
                - prometheus.istio-system:9090
                - prometheus.istio-system.svc
                - prometheus.istio-system.svc:9090
                - 10.106.241.151
                - 10.106.241.151:9090
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9090||prometheus.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: prometheus.istio-system.svc.cluster.local:9090/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "8079"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: fortio-server-l2.default.svc.cluster.local:8079
              domains:
                - fortio-server-l2.default.svc.cluster.local
                - fortio-server-l2.default.svc.cluster.local:8079
                - fortio-server-l2.default
                - fortio-server-l2.default:8079
                - fortio-server-l2.default.svc
                - fortio-server-l2.default.svc:8079
                - 10.104.5.115
                - 10.104.5.115:8079
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8079||fortio-server-l2.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server-l2.default.svc.cluster.local:8079/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server-l2.myprd-mark.svc.cluster.local:8079
              domains:
                - fortio-server-l2.myprd-mark.svc.cluster.local
                - fortio-server-l2.myprd-mark.svc.cluster.local:8079
                - fortio-server-l2.myprd-mark
                - fortio-server-l2.myprd-mark:8079
                - fortio-server-l2.myprd-mark.svc
                - fortio-server-l2.myprd-mark.svc:8079
                - 10.111.47.7
                - 10.111.47.7:8079
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8079||fortio-server-l2.myprd-mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server-l2.myprd-mark.svc.cluster.local:8079/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server-l2.mark.svc.cluster.local:8079
              domains:
                - fortio-server-l2.mark.svc.cluster.local
                - fortio-server-l2.mark.svc.cluster.local:8079
                - fortio-server-l2
                - fortio-server-l2:8079
                - fortio-server-l2.mark.svc
                - fortio-server-l2.mark.svc:8079
                - fortio-server-l2.mark
                - fortio-server-l2.mark:8079
                - 10.111.46.197
                - 10.111.46.197:8079
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8079||fortio-server-l2.mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server-l2.mark.svc.cluster.local:8079/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server.myprd-mark.svc.cluster.local:8079
              domains:
                - fortio-server.myprd-mark.svc.cluster.local
                - fortio-server.myprd-mark.svc.cluster.local:8079
                - fortio-server.myprd-mark
                - fortio-server.myprd-mark:8079
                - fortio-server.myprd-mark.svc
                - fortio-server.myprd-mark.svc:8079
                - 10.97.117.127
                - 10.97.117.127:8079
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8079||fortio-server.myprd-mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.myprd-mark.svc.cluster.local:8079/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server.mark.svc.cluster.local:8079
              domains:
                - fortio-server.mark.svc.cluster.local
                - fortio-server.mark.svc.cluster.local:8079
                - fortio-server
                - fortio-server:8079
                - fortio-server.mark.svc
                - fortio-server.mark.svc:8079
                - fortio-server.mark
                - fortio-server.mark:8079
                - 10.96.215.136
                - 10.96.215.136:8079
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8079||fortio-server.mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8079/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: jaeger-collector.istio-system.svc.cluster.local:14250
          virtual_hosts:
            - name: jaeger-collector.istio-system.svc.cluster.local:14250
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|14250||jaeger-collector.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: jaeger-collector.istio-system.svc.cluster.local:14250/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: istio-ingressgateway.istio-system.svc.cluster.local:15021
          virtual_hosts:
            - name: istio-ingressgateway.istio-system.svc.cluster.local:15021
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: istio-ingressgateway.istio-system.svc.cluster.local:15021/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: kubelet.kube-system.svc.cluster.local:4194
          virtual_hosts:
            - name: kubelet.kube-system.svc.cluster.local:4194
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|4194||kubelet.kube-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: kubelet.kube-system.svc.cluster.local:4194/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "80"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: istio-ingressgateway.istio-system.svc.cluster.local:80
              domains:
                - istio-ingressgateway.istio-system.svc.cluster.local
                - istio-ingressgateway.istio-system.svc.cluster.local:80
                - istio-ingressgateway.istio-system
                - istio-ingressgateway.istio-system:80
                - istio-ingressgateway.istio-system.svc
                - istio-ingressgateway.istio-system.svc:80
                - 10.98.94.185
                - 10.98.94.185:80
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|80||istio-ingressgateway.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: istio-ingressgateway.istio-system.svc.cluster.local:80/*
                  name: default
              include_request_attempt_count: true
            - name: tracing.istio-system.svc.cluster.local:80
              domains:
                - tracing.istio-system.svc.cluster.local
                - tracing.istio-system.svc.cluster.local:80
                - tracing.istio-system
                - tracing.istio-system:80
                - tracing.istio-system.svc
                - tracing.istio-system.svc:80
                - 10.100.95.189
                - 10.100.95.189:80
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|80||tracing.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: tracing.istio-system.svc.cluster.local:80/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "8080"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: fortio-server-l2.default.svc.cluster.local:8080
              domains:
                - fortio-server-l2.default.svc.cluster.local
                - fortio-server-l2.default.svc.cluster.local:8080
                - fortio-server-l2.default
                - fortio-server-l2.default:8080
                - fortio-server-l2.default.svc
                - fortio-server-l2.default.svc:8080
                - 10.104.5.115
                - 10.104.5.115:8080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8080||fortio-server-l2.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server-l2.default.svc.cluster.local:8080/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server-l2.myprd-mark.svc.cluster.local:8080
              domains:
                - fortio-server-l2.myprd-mark.svc.cluster.local
                - fortio-server-l2.myprd-mark.svc.cluster.local:8080
                - fortio-server-l2.myprd-mark
                - fortio-server-l2.myprd-mark:8080
                - fortio-server-l2.myprd-mark.svc
                - fortio-server-l2.myprd-mark.svc:8080
                - 10.111.47.7
                - 10.111.47.7:8080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8080||fortio-server-l2.myprd-mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server-l2.myprd-mark.svc.cluster.local:8080/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server-l2.mark.svc.cluster.local:8080
              domains:
                - fortio-server-l2.mark.svc.cluster.local
                - fortio-server-l2.mark.svc.cluster.local:8080
                - fortio-server-l2
                - fortio-server-l2:8080
                - fortio-server-l2.mark.svc
                - fortio-server-l2.mark.svc:8080
                - fortio-server-l2.mark
                - fortio-server-l2.mark:8080
                - 10.111.46.197
                - 10.111.46.197:8080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8080||fortio-server-l2.mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server-l2.mark.svc.cluster.local:8080/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server.myprd-mark.svc.cluster.local:8080
              domains:
                - fortio-server.myprd-mark.svc.cluster.local
                - fortio-server.myprd-mark.svc.cluster.local:8080
                - fortio-server.myprd-mark
                - fortio-server.myprd-mark:8080
                - fortio-server.myprd-mark.svc
                - fortio-server.myprd-mark.svc:8080
                - 10.97.117.127
                - 10.97.117.127:8080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8080||fortio-server.myprd-mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.myprd-mark.svc.cluster.local:8080/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server.mark.svc.cluster.local:8080
              domains:
                - fortio-server.mark.svc.cluster.local
                - fortio-server.mark.svc.cluster.local:8080
                - fortio-server
                - fortio-server:8080
                - fortio-server.mark.svc
                - fortio-server.mark.svc:8080
                - fortio-server.mark
                - fortio-server.mark:8080
                - 10.96.215.136
                - 10.96.215.136:8080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8080||fortio-server.mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8080/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "20001"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: kiali.istio-system.svc.cluster.local:20001
              domains:
                - kiali.istio-system.svc.cluster.local
                - kiali.istio-system.svc.cluster.local:20001
                - kiali.istio-system
                - kiali.istio-system:20001
                - kiali.istio-system.svc
                - kiali.istio-system.svc:20001
                - 10.101.226.77
                - 10.101.226.77:20001
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|20001||kiali.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: kiali.istio-system.svc.cluster.local:20001/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "8000"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: httpbin.default.svc.cluster.local:8000
              domains:
                - httpbin.default.svc.cluster.local
                - httpbin.default.svc.cluster.local:8000
                - httpbin.default
                - httpbin.default:8000
                - httpbin.default.svc
                - httpbin.default.svc:8000
                - 10.111.227.134
                - 10.111.227.134:8000
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8000||httpbin.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: httpbin.default.svc.cluster.local:8000/*
                  name: default
              include_request_attempt_count: true
            - name: httpbin.mark.svc.cluster.local:8000
              domains:
                - httpbin.mark.svc.cluster.local
                - httpbin.mark.svc.cluster.local:8000
                - httpbin
                - httpbin:8000
                - httpbin.mark.svc
                - httpbin.mark.svc:8000
                - httpbin.mark
                - httpbin.mark:8000
                - 10.100.234.64
                - 10.100.234.64:8000
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8000||httpbin.mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: httpbin.mark.svc.cluster.local:8000/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "10255"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: kubelet.kube-system.svc.cluster.local:10255
              domains:
                - kubelet.kube-system.svc.cluster.local
                - kubelet.kube-system.svc.cluster.local:10255
                - kubelet.kube-system
                - kubelet.kube-system:10255
                - kubelet.kube-system.svc
                - kubelet.kube-system.svc:10255
                - '*.kubelet.kube-system.svc.cluster.local'
                - '*.kubelet.kube-system.svc.cluster.local:10255'
                - '*.kubelet.kube-system'
                - '*.kubelet.kube-system:10255'
                - '*.kubelet.kube-system.svc'
                - '*.kubelet.kube-system.svc:10255'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|10255||kubelet.kube-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: kubelet.kube-system.svc.cluster.local:10255/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "15010"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: istiod.istio-system.svc.cluster.local:15010
              domains:
                - istiod.istio-system.svc.cluster.local
                - istiod.istio-system.svc.cluster.local:15010
                - istiod.istio-system
                - istiod.istio-system:15010
                - istiod.istio-system.svc
                - istiod.istio-system.svc:15010
                - 10.108.56.118
                - 10.108.56.118:15010
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|15010||istiod.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: istiod.istio-system.svc.cluster.local:15010/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "9080"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: details.default.svc.cluster.local:9080
              domains:
                - details.default.svc.cluster.local
                - details.default.svc.cluster.local:9080
                - details.default
                - details.default:9080
                - details.default.svc
                - details.default.svc:9080
                - 10.101.201.133
                - 10.101.201.133:9080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9080||details.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: details.default.svc.cluster.local:9080/*
                  name: default
              include_request_attempt_count: true
            - name: productpage.default.svc.cluster.local:9080
              domains:
                - productpage.default.svc.cluster.local
                - productpage.default.svc.cluster.local:9080
                - productpage.default
                - productpage.default:9080
                - productpage.default.svc
                - productpage.default.svc:9080
                - 10.104.202.166
                - 10.104.202.166:9080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9080||productpage.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: productpage.default.svc.cluster.local:9080/*
                  name: default
              include_request_attempt_count: true
            - name: ratings.default.svc.cluster.local:9080
              domains:
                - ratings.default.svc.cluster.local
                - ratings.default.svc.cluster.local:9080
                - ratings.default
                - ratings.default:9080
                - ratings.default.svc
                - ratings.default.svc:9080
                - 10.103.234.160
                - 10.103.234.160:9080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9080||ratings.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: ratings.default.svc.cluster.local:9080/*
                  name: default
              include_request_attempt_count: true
            - name: reviews.default.svc.cluster.local:9080
              domains:
                - reviews.default.svc.cluster.local
                - reviews.default.svc.cluster.local:9080
                - reviews.default
                - reviews.default:9080
                - reviews.default.svc
                - reviews.default.svc:9080
                - 10.108.181.66
                - 10.108.181.66:9080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9080||reviews.default.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: reviews.default.svc.cluster.local:9080/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.952Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "8070"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: fortio-server.myprd-mark.svc.cluster.local:8070
              domains:
                - fortio-server.myprd-mark.svc.cluster.local
                - fortio-server.myprd-mark.svc.cluster.local:8070
                - fortio-server.myprd-mark
                - fortio-server.myprd-mark:8070
                - fortio-server.myprd-mark.svc
                - fortio-server.myprd-mark.svc:8070
                - 10.97.117.127
                - 10.97.117.127:8070
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8070||fortio-server.myprd-mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.myprd-mark.svc.cluster.local:8070/*
                  name: default
              include_request_attempt_count: true
            - name: fortio-server.mark.svc.cluster.local:8070
              domains:
                - fortio-server.mark.svc.cluster.local
                - fortio-server.mark.svc.cluster.local:8070
                - fortio-server
                - fortio-server:8070
                - fortio-server.mark.svc
                - fortio-server.mark.svc:8070
                - fortio-server.mark
                - fortio-server.mark:8070
                - 10.96.215.136
                - 10.96.215.136:8070
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|8070||fortio-server.mark.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: fortio-server.mark.svc.cluster.local:8070/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "9411"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: zipkin.istio-system.svc.cluster.local:9411
              domains:
                - zipkin.istio-system.svc.cluster.local
                - zipkin.istio-system.svc.cluster.local:9411
                - zipkin.istio-system
                - zipkin.istio-system:9411
                - zipkin.istio-system.svc
                - zipkin.istio-system.svc:9411
                - 10.97.176.41
                - 10.97.176.41:9411
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|9411||zipkin.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: zipkin.istio-system.svc.cluster.local:9411/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: "1080"
          virtual_hosts:
            - name: allow_any
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: PassthroughCluster
                    timeout: 0s
                    max_grpc_timeout: 0s
                  name: allow_any
              include_request_attempt_count: true
            - name: go-socks5-proxy.cndt.svc.cluster.local:1080
              domains:
                - go-socks5-proxy.cndt.svc.cluster.local
                - go-socks5-proxy.cndt.svc.cluster.local:1080
                - go-socks5-proxy.cndt
                - go-socks5-proxy.cndt:1080
                - go-socks5-proxy.cndt.svc
                - go-socks5-proxy.cndt.svc:1080
                - 10.97.230.252
                - 10.97.230.252:1080
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|1080||go-socks5-proxy.cndt.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: go-socks5-proxy.cndt.svc.cluster.local:1080/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.951Z"
      - version_info: 2022-08-28T00:41:03Z/5
        route_config:
          '@type': type.googleapis.com/envoy.config.route.v3.RouteConfiguration
          name: jaeger-collector.istio-system.svc.cluster.local:14268
          virtual_hosts:
            - name: jaeger-collector.istio-system.svc.cluster.local:14268
              domains:
                - '*'
              routes:
                - match:
                    prefix: /
                  route:
                    cluster: outbound|14268||jaeger-collector.istio-system.svc.cluster.local
                    timeout: 0s
                    retry_policy:
                      retry_on: connect-failure,refused-stream,unavailable,cancelled,retriable-status-codes
                      num_retries: 2
                      retry_host_predicate:
                        - name: envoy.retry_host_predicates.previous_hosts
                          typed_config:
                            '@type': type.googleapis.com/envoy.extensions.retry.host.previous_hosts.v3.PreviousHostsPredicate
                      host_selection_retry_max_attempts: "5"
                      retriable_status_codes:
                        - 503
                    max_stream_duration:
                      max_stream_duration: 0s
                      grpc_timeout_header_max: 0s
                  decorator:
                    operation: jaeger-collector.istio-system.svc.cluster.local:14268/*
                  name: default
              include_request_attempt_count: true
          validate_clusters: false
        last_updated: "2022-08-28T00:41:08.953Z"
  - '@type': type.googleapis.com/envoy.admin.v3.SecretsConfigDump
    dynamic_active_secrets:
      - name: default
        last_updated: "2022-08-28T00:41:07.628Z"
        secret:
          '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret
          name: default
          tls_certificate:
            certificate_chain:
              inline_bytes: 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
            private_key:
              inline_bytes: W3JlZGFjdGVkXQ==
      - name: ROOTCA
        last_updated: "2022-08-28T00:41:07.473Z"
        secret:
          '@type': type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret
          name: ROOTCA
          validation_context:
            trusted_ca:
              inline_bytes: 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
