onfig/istio.mesh.v1alpha1/>网格选项</a>以启用 OPA：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ istioctl install -y -f - &lt;&lt;&#39;EOF&#39;
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  meshConfig:
    accessLogFile: /dev/stdout
    accessLogFormat: |
      [OPA DEMO] my-new-dynamic-metadata: &#34;%DYNAMIC_METADATA(envoy.filters.http.ext_authz)%&#34;
    extensionProviders:
    - name: &#34;opa.local&#34;
      envoyExtAuthzGrpc:
        service: 