envoy.yaml.tmpl

admin:
  access_log_path: /tmp/admin_access.log
  address:
    socket_address:
      protocol: TCP
      address: 127.0.0.1
      port_value: 9901
static_resources:
  listeners:
  - name: listener_0
    per_connection_buffer_limit_bytes: 20971520
    address:
      socket_address:
        address: 0.0.0.0
        port_value: LISTENER_PORT
    filter_chains:
    - filters:
      - name: envoy.http_connection_manager
        config:
          stat_prefix: ingress_http
          route_config:
            name: local_route
            virtual_hosts:
            - name: local_service
              domains: ["*"]
              routes:
              - match:
                  path: "/envoy-health-check"
                direct_response:
                  status: 200
              - match:
                  prefix: "/"
                route:
                  cluster: service_local
                  timeout: 300s
                  upgrade_configs:
                  - upgrade_type: "websocket"
                    enabled: WEBSOCKET_ENABLED
          http_filters:
          - name: envoy.router
      tls_context:
        common_tls_context:
          alpn_protocols: "h2,http/1.1"
          tls_certificates:
          - certificate_chain:
              filename: "/etc/ssl/private/tls.crt"
            private_key:
              filename: "/etc/ssl/private/tls.key"

  clusters:
  - name: service_local
    connect_timeout: 5s
    type: STATIC
    hosts:
      - socket_address:
          address: TARGET_HOST
          port_value: TARGET_PORT