istio
1name: envoy.filters.http.rbac
2typedConfig:
3'@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4rules:
5policies:
6ns[foo]-policy[allow-none]-rule[0]:
7permissions:
8- notRule:
9any: true
10principals:
11- notId:
12any: true
13shadowRulesStatPrefix: istio_dry_run_allow_
14