# NOT APPLIED, deliberately left out of kustomization.yaml.
# EG v1.3.2 already defaults envoyService.externalTrafficPolicy to Local, so all
# three gateway LB services preserve the real client IP without this CR. Kept as
# documentation of that finding.
apiVersion: gateway.envoyproxy.io/v1alpha1
kind: EnvoyProxy
metadata:
  name: eg-public-proxy
  namespace: envoy-gateway
spec:
  provider:
    type: Kubernetes
    kubernetes:
      envoyService:
        externalTrafficPolicy: Local