istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pilot/pkg/security/authz/builder/testdata/http/extended-allow-path-out.yaml (about)

     1  name: envoy.filters.http.rbac
     2  typedConfig:
     3    '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
     4    rules:
     5      policies:
     6        ns[foo]-policy[httpbin-1]-rule[0]:
     7          permissions:
     8          - andRules:
     9              rules:
    10              - orRules:
    11                  rules:
    12                  - urlPath:
    13                      path:
    14                        exact: /exact
    15                  - urlPath:
    16                      path:
    17                        prefix: /prefix/
    18                  - urlPath:
    19                      path:
    20                        suffix: /suffix
    21                  - urlPath:
    22                      path:
    23                        safeRegex:
    24                          regex: .+
    25                  - uriTemplate:
    26                      name: uri-template
    27                      typedConfig:
    28                        '@type': type.googleapis.com/envoy.extensions.path.match.uri_template.v3.UriTemplateMatchConfig
    29                        pathTemplate: /path/template/*
    30                  - uriTemplate:
    31                      name: uri-template
    32                      typedConfig:
    33                        '@type': type.googleapis.com/envoy.extensions.path.match.uri_template.v3.UriTemplateMatchConfig
    34                        pathTemplate: /**/path/template
    35              - notRule:
    36                  orRules:
    37                    rules:
    38                    - urlPath:
    39                        path:
    40                          exact: /not-exact
    41                    - urlPath:
    42                        path:
    43                          prefix: /not-prefix/
    44                    - urlPath:
    45                        path:
    46                          suffix: /not-suffix
    47                    - urlPath:
    48                        path:
    49                          safeRegex:
    50                            regex: .+
    51                    - uriTemplate:
    52                        name: uri-template
    53                        typedConfig:
    54                          '@type': type.googleapis.com/envoy.extensions.path.match.uri_template.v3.UriTemplateMatchConfig
    55                          pathTemplate: /not-path/template/*
    56                    - uriTemplate:
    57                        name: uri-template
    58                        typedConfig:
    59                          '@type': type.googleapis.com/envoy.extensions.path.match.uri_template.v3.UriTemplateMatchConfig
    60                          pathTemplate: /**/not-path/template
    61          principals:
    62          - andIds:
    63              ids:
    64              - any: true
    65    shadowRulesStatPrefix: istio_dry_run_allow_