istio

1
name: envoy.filters.network.rbac
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC
4
  rules:
5
    policies:
6
      ns[foo]-policy[httpbin-2]-rule[0]:
7
        permissions:
8
        - andRules:
9
            rules:
10
            - orRules:
11
                rules:
12
                - destinationPort: 9000
13
        principals:
14
        - andIds:
15
            ids:
16
            - any: true
17
  shadowRules:
18
    policies:
19
      ns[foo]-policy[httpbin-1]-rule[0]:
20
        permissions:
21
        - andRules:
22
            rules:
23
            - orRules:
24
                rules:
25
                - destinationPort: 80
26
        principals:
27
        - andIds:
28
            ids:
29
            - any: true
30
  shadowRulesStatPrefix: istio_dry_run_allow_
31
  statPrefix: tcp.
32