}

	jwksURI := ms.URL + "/oauth2/v3/certs"

	cases := []struct {
		name          string
		in            []*config.Config
		jwksFetchMode jwt.JwksFetchMode
		expected      *hcm.HttpFilter
	}{
		{
			name:     "No policy",
			in:       []*config.Config{},
			expected: nil,
		},
		{
			name: "Empty policy",
			in: []*config.Config{
				{
					Spec: &v1beta1.RequestAuthentication{},

						{
							Name: wellknown.HTTPConnectionManager,
							ConfigType: &listener.Filter_TypedConfig{
								TypedConfig: protoconv.MessageToAny(&hcm.HttpConnectionManager{
									HttpFilters: []*hcm.HttpFilter{
										{Name: "http-filter-to-be-replaced"},
										{Name: "another-http-filter"},
									},
								}),
							},
						},
					},
				},
			},
		},
		{

		return []string{}, err
	}

	// Identify RBAC policies. Currently there are no "breadcrumbs" so we only return the policy names.
	for _, httpFilter := range hcm.HttpFilters {
		if httpFilter.Name == wellknown.HTTPRoleBasedAccessControl {
			rbac := &rbachttp.RBAC{}
			if err := httpFilter.GetTypedConfig().UnmarshalTo(rbac); err == nil {
				policies := []string{}
				for polName := range rbac.Rules.Policies {

				{
					Name:           "0.0.0.0_8080",
					Type:           listenertest.MTLSHTTP,
					HTTPFilters:    httpFilters,
					NetworkFilters: httpNetworkFilters,
					TotalMatch:     true,
				},
				{
					Name:           "0.0.0.0_8080",
					Type:           listenertest.PlainTCP,
					HTTPFilters:    httpFilters,
					NetworkFilters: httpNetworkFilters,
					TotalMatch:     true,
				},
				{

networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: metadata-exchange-1.6-1-8-6 namespace: istio-system labels: istio.io/rev: 1-8-6 install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" spec: configPatches: - applyTo: HTTP_FILTER match: context: ANY # inbound, outbound, and gateway proxy: proxyVersion: '^1\.6.*' listener: filterChain: filter: name: "envoy.http_connection_manager" patch: operation: INSERT_BEFORE value: name: istio.metadata_exchange typed_config: "@type":...

proxy: # resources: # requests: # cpu: 10m # memory: 40Mi apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: metadata-exchange-1.6-1-7-6 namespace: istio-system labels: istio.io/rev: 1-7-6 spec: configPatches: - applyTo: HTTP_FILTER match: context: ANY # inbound, outbound, and gateway proxy: proxyVersion: '^1\.6.*' listener: filterChain: filter: name: "envoy.http_connection_manager" patch: operation: INSERT_BEFORE value: name: istio.metadata_exchange typed_config: "@type":...

alpha3 kind: EnvoyFilter metadata: name: metadata-exchange-1.10-1-10-0 namespace: istio-system labels: istio.io/rev: 1-10-0 install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" spec: configPatches: - applyTo: HTTP_FILTER match: context: SIDECAR_INBOUND proxy: proxyVersion: '^1\.10.*' listener: filterChain: filter: name: "envoy.filters.network.http_connection_manager" patch: operation: INSERT_BEFORE value: name: istio.metadata_exchange typed_config: "@type": typ...

networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: metadata-exchange-1.8-1-9-5 namespace: istio-system labels: istio.io/rev: 1-9-5 install.operator.istio.io/owning-resource: unknown operator.istio.io/component: "Pilot" spec: configPatches: - applyTo: HTTP_FILTER match: context: SIDECAR_INBOUND proxy: proxyVersion: '^1\.8.*' listener: filterChain: filter: name: "envoy.filters.network.http_connection_manager" patch: operation: INSERT_BEFORE value: name: istio.metadata_exchange typed_config: "@type": type...

                                }
                              }
                            ]
                          }
                        ]
                      },
                      "http_filters": [
                        {
                          "name": "envoy.filters.http.router",
                          "typed_config": {

protocol: TCP selector: app: istiod istio.io/rev: 1-6-11 --- apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: metadata-exchange-1.6-1-6-11 namespace: istio-system labels: istio.io/rev: 1-6-11 spec: configPatches: - applyTo: HTTP_FILTER match: context: ANY # inbound, outbound, and gateway proxy: proxyVersion: '^1\.6.*' listener: filterChain: filter: name: "envoy.http_connection_manager" patch: operation: INSERT_BEFORE value: name: istio.metadata_exchange typed_config: "@type":...