istio

1
name: envoy.filters.http.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4
  rules:
5
    policies:
6
      ns[foo]-policy[httpbin-1]-rule[0]:
7
        permissions:
8
        - andRules:
9
            rules:
10
            - orRules:
11
                rules:
12
                - urlPath:
13
                    path:
14
                      exact: /exact
15
                - urlPath:
16
                    path:
17
                      prefix: /prefix/
18
                - urlPath:
19
                    path:
20
                      suffix: /suffix
21
                - urlPath:
22
                    path:
23
                      safeRegex:
24
                        regex: .+
25
            - notRule:
26
                orRules:
27
                  rules:
28
                  - urlPath:
29
                      path:
30
                        exact: /not-exact
31
                  - urlPath:
32
                      path:
33
                        prefix: /not-prefix/
34
                  - urlPath:
35
                      path:
36
                        suffix: /not-suffix
37
                  - urlPath:
38
                      path:
39
                        safeRegex:
40
                          regex: .+
41
        principals:
42
        - andIds:
43
            ids:
44
            - any: true
45
  shadowRulesStatPrefix: istio_dry_run_allow_
46