istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pilot/pkg/security/authz/builder/testdata/http/extended-dry-run-allow-and-deny-out1.yaml (about)

     1  name: envoy.filters.http.rbac
     2  typedConfig:
     3    '@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
     4    shadowRules:
     5      action: DENY
     6      policies:
     7        ns[foo]-policy[httpbin-2]-rule[0]:
     8          permissions:
     9          - andRules:
    10              rules:
    11              - orRules:
    12                  rules:
    13                  - urlPath:
    14                      path:
    15                        exact: /deny
    16          principals:
    17          - andIds:
    18              ids:
    19              - any: true
    20    shadowRulesStatPrefix: istio_dry_run_deny_