////
This module included in the following assemblies:
*service_mesh_/v2x/ossm-extensions.adoc
////
:_mod-docs-content-type: PROCEDURE
[id="ossm-wasmplugin-deploy_{context}"]
= Deploying `WasmPlugin` resources

You can enable {SMProductName} extensions using the `WasmPlugin` resource. In this example, `istio-system` is the name of the {SMProductShortName} control plane project. The following example creates an `openid-connect` filter that performs an OpenID Connect flow to authenticate the user.

.Procedure

. Create the following example resource:
+
.Example plugin.yaml
[source,yaml]
----
apiVersion: extensions.istio.io/v1alpha1
kind: WasmPlugin
metadata:
  name: openid-connect
  namespace: istio-system
spec:
  selector:
    matchLabels:
      istio: ingressgateway
  url: oci://private-registry:5000/openid-connect/openid:latest
  imagePullPolicy: IfNotPresent
  imagePullSecret: private-registry-pull-secret
  phase: AUTHN
  pluginConfig:
    openid_server: authn
    openid_realm: ingress
----

. Apply your `plugin.yaml` file with the following command:
+
[source,terminal]
----
$ oc apply -f plugin.yaml
----