istio

1
name: envoy.filters.http.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4
  shadowRules:
5
    action: DENY
6
    policies:
7
      ns[foo]-policy[httpbin-2]-rule[0]:
8
        permissions:
9
        - andRules:
10
            rules:
11
            - orRules:
12
                rules:
13
                - urlPath:
14
                    path:
15
                      exact: /deny
16
        principals:
17
        - andIds:
18
            ids:
19
            - any: true
20
  shadowRulesStatPrefix: istio_dry_run_deny_
21