istio

1
name: envoy.filters.network.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC
4
  rules:
5
    policies:
6
      ns[foo]-policy[httpbin-deny]-rule[3]:
7
        permissions:
8
        - andRules:
9
            rules:
10
            - orRules:
11
                rules:
12
                - destinationPort: 80
13
        principals:
14
        - andIds:
15
            ids:
16
            - orIds:
17
                ids:
18
                - authenticated:
19
                    principalName:
20
                      safeRegex:
21
                        regex: .*/ns/ns-1/.*
22
  shadowRulesStatPrefix: istio_dry_run_allow_
23
  statPrefix: tcp.
24