istio

1
name: envoy.filters.http.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
4
  rules:
5
    policies:
6
      ns[foo]-policy[httpbin-2]-rule[0]:
7
        permissions:
8
        - andRules:
9
            rules:
10
            - orRules:
11
                rules:
12
                - urlPath:
13
                    path:
14
                      exact: /another
15
        principals:
16
        - andIds:
17
            ids:
18
            - any: true
19
  shadowRules:
20
    policies:
21
      ns[foo]-policy[httpbin-1]-rule[0]:
22
        permissions:
23
        - andRules:
24
            rules:
25
            - orRules:
26
                rules:
27
                - urlPath:
28
                    path:
29
                      exact: /allow
30
        principals:
31
        - andIds:
32
            ids:
33
            - any: true
34
  shadowRulesStatPrefix: istio_dry_run_allow_
35