quired by local ext auth server.
</code></pre>
<p>A workload in the <code>myns</code> namespace needs to access a different ext_auth server
that does not accept initial metadata. Since proto merge cannot remove fields, the
following configuration uses the <code>REPLACE</code> operation. If you do not need to inherit
fields, REPLACE is preferred over MERGE.</p>
<pre><code class="language-yaml">apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: mysvc-ext-authz
  namespace: myns
spec: