istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-no-namespace-out1.yaml (about)

     1  name: envoy.filters.http.rbac
     2  typedConfig:
     3    '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
     4    shadowRules:
     5      action: DENY
     6      policies:
     7        istio-ext-authz-ns[foo]-policy[httpbin-1]-rule[0]:
     8          permissions:
     9          - andRules:
    10              rules:
    11              - orRules:
    12                  rules:
    13                  - urlPath:
    14                      path:
    15                        exact: /httpbin1
    16          principals:
    17          - andIds:
    18              ids:
    19              - any: true
    20        istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
    21          permissions:
    22          - andRules:
    23              rules:
    24              - orRules:
    25                  rules:
    26                  - urlPath:
    27                      path:
    28                        exact: /httpbin2
    29          principals:
    30          - andIds:
    31              ids:
    32              - any: true
    33    shadowRulesStatPrefix: istio_ext_authz_