// to allow calls to a local authz server running as a sidecar to the echo
// app.
func NewLocal(ctx resource.Context, ns namespace.Instance) (Server, error) {
	return newLocalKubeServer(ctx, ns)
}

// NewLocalOrFail calls NewLocal and fails if an error occurs.
func NewLocalOrFail(t framework.TestContext, ns namespace.Instance) Server {
	t.Helper()
	s, err := NewLocal(t, ns)
	if err != nil {

spec:
  hosts:
  - "{{ .grpcHost }}"
  endpoints:
  - address: "127.0.0.1"
  ports:
  - name: grpc
    number: {{ .grpcPort }}
    protocol: GRPC
  resolution: STATIC
---`
)

func newLocalKubeServer(ctx resource.Context, ns namespace.Instance) (server *localServerImpl, err error) {
	if ns == nil {
		return nil, errors.New("namespace required for local authz server")
	}

	start := time.Now()