istio

1
name: envoy.filters.http.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4
  rules:
5
    action: LOG
6
    policies:
7
      ns[foo]-policy[audit-all]-rule[0]:
8
        permissions:
9
        - andRules:
10
            rules:
11
            - any: true
12
        principals:
13
        - andIds:
14
            ids:
15
            - any: true
16
  shadowRulesStatPrefix: istio_dry_run_allow_
17