istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pilot/pkg/security/authz/builder/testdata/tcp/allow-both-http-tcp-out.yaml (about)

     1  name: envoy.filters.network.rbac
     2  typedConfig:
     3    '@type': type.googleapis.com/envoy.extensions.filters.network.rbac.v3.RBAC
     4    rules:
     5      policies:
     6        ns[foo]-policy[httpbin-deny]-rule[3]:
     7          permissions:
     8          - andRules:
     9              rules:
    10              - orRules:
    11                  rules:
    12                  - destinationPort: 80
    13          principals:
    14          - andIds:
    15              ids:
    16              - orIds:
    17                  ids:
    18                  - authenticated:
    19                      principalName:
    20                        safeRegex:
    21                          regex: .*/ns/ns-1/.*
    22    shadowRulesStatPrefix: istio_dry_run_allow_
    23    statPrefix: tcp.