istio

1
action: DENY
2
groups:
3
- rules:
4
  - matches:
5
    - destinationPorts:
6
      - 80
7
  - matches:
8
    - namespaces:
9
      - exact: from-mix-ns
10
      principals:
11
      - exact: from-mix-principal
12
- rules:
13
  - matches:
14
    - destinationPorts:
15
      - 80
16
  - matches:
17
    - namespaces:
18
      - exact: to-mix-ns
19
      principals:
20
      - exact: to-mix-principal
21
- rules:
22
  - matches:
23
    - destinationPorts:
24
      - 80
25
  - matches:
26
    - namespaces:
27
      - exact: only-l4-ns
28
      principals:
29
      - exact: only-l4-principals
30
- rules:
31
  - matches:
32
    - {}
33
  - matches:
34
    - {}
35
- rules:
36
  - matches:
37
    - namespaces:
38
      - exact: when-l4-l7-ns
39
  - matches:
40
    - {}
41
- rules:
42
  - matches:
43
    - namespaces:
44
      - exact: when-l4-ns
45
  - matches:
46
    - notSourceIps:
47
      - address: FBQUFA==
48
        length: 32
49
      sourceIps:
50
      - address: CgoKCg==
51
        length: 32
52
- rules:
53
  - matches:
54
    - {}
55
  - matches:
56
    - {}
57
name: groups-deny
58
scope: NAMESPACE
59