add stat prefix for WASM default RBAC filters (#57824)

* add stat prefix for wasm default http rbac filters

Signed-off-by: Rama Chavali <[email protected]>

* fix ut

Signed-off-by: Rama Chavali <[email protected]>

---------

Signed-off-by: Rama Chavali <[email protected]>

Author: ramaraochavali

pkg/istio-agent/xds_proxy_delta_test.go

@@ -198,7 +198,8 @@ func TestDeltaECDSWasmConversion(t *testing.T) {
 		t.Fatalf("wasm config conversion output %v failed to unmarshal", gotResp.Resources[0])
 	}
 	httpDenyAll := &httprbac.RBAC{
-		Rules: &rbacv3.RBAC{},
+		Rules:           &rbacv3.RBAC{},
+		RulesStatPrefix: "wasm-default-deny",
 	}
 	wantEcdsConfig = &core.TypedExtensionConfig{
 		Name:        "extension-config",

pkg/istio-agent/xds_proxy_test.go

@@ -538,7 +538,8 @@ func TestECDSWasmConversion(t *testing.T) {
 		t.Fatalf("wasm config conversion output %v failed to unmarshal", gotResp.Resources[0])
 	}
 	httpDenyAll := &httprbac.RBAC{
-		Rules: &rbacv3.RBAC{},
+		Rules:           &rbacv3.RBAC{},
+		RulesStatPrefix: "wasm-default-deny",
 	}
 	wantEcdsConfig = &core.TypedExtensionConfig{
 		Name:        "extension-config",

pkg/wasm/convert.go

@@ -38,13 +38,15 @@ import (
 )
 
 var (
-	allowHTTPTypedConfig = &anypb.Any{
-		TypeUrl: "type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC",
+	allowHTTPTypedConfig, _ = anypb.New(&httprbac.RBAC{
 		// no rules mean allow all.
-	}
+		RulesStatPrefix: "wasm-default-allow",
+	})
+
 	denyHTTPTypedConfig, _ = anypb.New(&httprbac.RBAC{
 		// empty rule means deny all.
-		Rules: &rbacv3.RBAC{},
+		Rules:           &rbacv3.RBAC{},
+		RulesStatPrefix: "wasm-default-deny",
 	})
 
 	allowNetworkTypeConfig, _ = anypb.New(&networkrbac.RBAC{

pkg/wasm/convert_test.go

@@ -479,9 +479,12 @@ var extensionConfigMap = map[string]*core.TypedExtensionConfig{
 			FailOpen: true,
 		},
 	}),
-	"remote-load-allow": buildAnyExtensionConfig("remote-load-fail", &rbac.RBAC{}),
+	"remote-load-allow": buildAnyExtensionConfig("remote-load-fail", &rbac.RBAC{
+		RulesStatPrefix: "wasm-default-allow",
+	}),
 	"remote-load-deny": buildAnyExtensionConfig("remote-load-fail", &rbac.RBAC{
-		Rules: &rbacv3.RBAC{},
+		Rules:           &rbacv3.RBAC{},
+		RulesStatPrefix: "wasm-default-deny",
 	}),
 	"remote-load-secret": buildTypedStructExtensionConfig("remote-load-success", &wasm.Wasm{
 		Config: &v3.PluginConfig{