istio

1
name: envoy.filters.http.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4
  shadowRules:
5
    action: DENY
6
    policies:
7
      istio-ext-authz-ns[foo]-policy[httpbin-1]-rule[0]:
8
        permissions:
9
        - andRules:
10
            rules:
11
            - orRules:
12
                rules:
13
                - urlPath:
14
                    path:
15
                      exact: /httpbin1
16
        principals:
17
        - andIds:
18
            ids:
19
            - any: true
20
      istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
21
        permissions:
22
        - andRules:
23
            rules:
24
            - orRules:
25
                rules:
26
                - urlPath:
27
                    path:
28
                      exact: /httpbin2
29
        principals:
30
        - andIds:
31
            ids:
32
            - any: true
33
  shadowRulesStatPrefix: istio_ext_authz_
34