istio
1name: envoy.filters.http.rbac2typedConfig:3'@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC4rules:5policies:6ns[foo]-policy[httpbin]-rule[0]:7permissions:8- andRules:9rules:10- any: true11principals:12- andIds:13ids:14- orIds:15ids:16- authenticated:17principalName:18safeRegex:19regex: .+20- andIds:21ids:22- orIds:23ids:24- authenticated:25principalName:26safeRegex:27regex: spiffe://.*/ns/foo/sa/rule[0]-from[1]-principal[0]28- authenticated:29principalName:30exact: spiffe://td1/ns/foo/sa/rule[0]-from[1]-principal[1]31- authenticated:32principalName:33safeRegex:34regex: spiffe://.*bar/ns/foo/sa/rule[0]-from[1]-principal[1]35shadowRulesStatPrefix: istio_dry_run_allow_36