data:
  mesh: |-
    # Add the following contents:
    extensionProviders:
    - name: &#34;opa.default&#34;
      envoyExtAuthzGrpc:
        service: &#34;opa.default.svc.cluster.local&#34;
        port: &#34;9191&#34;</code></pre></div></div></div><h3 id=create-an-authorizationpolicy-with-a-custom-action>使用 CUSTOM 操作创建 AuthorizationPolicy</h3><p>运行以下命令创建授权策略，在除 <code>/ip</code> 之外的所有路径上启用外部授权：</p><div id=tabset-zhblog2021better-extern