istio

1
groups:
2
- rules:
3
  - matches:
4
    - notPrincipals:
5
      - exact: not-principal
6
      - prefix: not-principal-prefix-
7
      - suffix: -suffix-not-principal
8
      - presence: {}
9
      principals:
10
      - exact: principal
11
      - prefix: principal-prefix-
12
      - suffix: -suffix-principal
13
      - presence: {}
14
- rules:
15
  - matches:
16
    - namespaces:
17
      - exact: ns
18
      - prefix: ns-prefix-
19
      - suffix: -ns-suffix
20
      - presence: {}
21
      notNamespaces:
22
      - exact: not-ns
23
      - prefix: not-ns-prefix-
24
      - suffix: -not-ns-suffix
25
      - presence: {}
26
- rules:
27
  - matches:
28
    - notSourceIps:
29
      - address: AgIDBA==
30
        length: 32
31
      - address: BgYAAA==
32
        length: 16
33
      sourceIps:
34
      - address: AQIDBA==
35
        length: 32
36
      - address: BQYAAA==
37
        length: 16
38
- rules:
39
  - matches:
40
    - destinationPorts:
41
      - 80
42
      - 90
43
      notDestinationPorts:
44
      - 800
45
      - 900
46
- rules:
47
  - matches:
48
    - notSourceIps:
49
      - address: WgoKCg==
50
        length: 32
51
      - address: WqgKAA==
52
        length: 24
53
      sourceIps:
54
      - address: CgoKCg==
55
        length: 32
56
      - address: wKgKAA==
57
        length: 24
58
- rules:
59
  - matches:
60
    - namespaces:
61
      - exact: ns
62
      - prefix: ns-prefix-
63
      - suffix: -ns-suffix
64
      - presence: {}
65
      notNamespaces:
66
      - exact: not-ns
67
      - prefix: not-ns-prefix-
68
      - suffix: -not-ns-suffix
69
      - presence: {}
70
- rules:
71
  - matches:
72
    - notPrincipals:
73
      - exact: not-principal
74
      - prefix: not-principal-prefix-
75
      - suffix: -not-suffix-principal
76
      - presence: {}
77
      principals:
78
      - exact: principal
79
      - prefix: principal-prefix-
80
      - suffix: -suffix-principal
81
      - presence: {}
82
- rules:
83
  - matches:
84
    - destinationIps:
85
      - address: CgoKCg==
86
        length: 32
87
      - address: wKgKAA==
88
        length: 24
89
      notDestinationIps:
90
      - address: WgoKCg==
91
        length: 32
92
      - address: WqgKAA==
93
        length: 24
94
- rules:
95
  - matches:
96
    - destinationPorts:
97
      - 91
98
      - 92
99
      notDestinationPorts:
100
      - 9001
101
      - 9002
102
name: allow
103
scope: NAMESPACE
104