CheckRequest API supports passing additional labels such as pod labels https://www.envoyproxy.io/docs/envoy/latest/api-v3/service/auth/v3/attribute_context.proto#service-auth-v3-attributecontext-peer in the peer's attribute context.

However ext authz filter does not have configuration to specify those labels. We have a usecase to pass k8s pod labels to checkrequest.

Can we enhance ext authz filter and add labels config so that checkRequest can use it while constructing request?

Are there any alternatives?