Host:    "localhost",
								Path:    "/check",
								Headers: map[string]string{checkHeader: tc.header},
							},
						},
					},
				})
				if err != nil {
					t.Errorf(err.Error())
				} else {
					got = int(resp.Status.Code)
				}
			} else {
				httpReq.Header.Set(checkHeader, tc.header)
				resp, err := httpClient.Do(httpReq)
				if err != nil {
					t.Errorf(err.Error())

		}))

	return checkRequest(opts, expectAllowed, checkHeaders)
}

func checkRequest(opts echo.CallOptions, expectAllowed bool, checkHeaders echo.Checker) echo.Checker {
	switch {
	case opts.Port.Protocol.IsGRPC():
		switch opts.HTTP.Headers.Get(XExtAuthz) {
		case XExtAuthzAllow:
			return check.And(check.NoError(), checkHeaders)
		default:
			// Deny