istio
33 строки · 873.0 Байт
1name: envoy.filters.http.rbac
2typedConfig:
3'@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4shadowRules:
5action: DENY
6policies:
7istio-ext-authz-ns[foo]-policy[httpbin-1]-rule[0]:
8permissions:
9- andRules:
10rules:
11- orRules:
12rules:
13- urlPath:
14path:
15exact: /httpbin1
16principals:
17- andIds:
18ids:
19- any: true
20istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
21permissions:
22- andRules:
23rules:
24- orRules:
25rules:
26- urlPath:
27path:
28exact: /httpbin2
29principals:
30- andIds:
31ids:
32- any: true
33shadowRulesStatPrefix: istio_ext_authz_
34