name: envoy.filters.http.rbac | |
typedConfig: | |
'@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC | |
rules: | |
policies: | |
ns[foo]-policy[httpbin-allow]-rule[0]: | |
permissions: | |
- andRules: | |
rules: | |
- any: true | |
principals: | |
- andIds: | |
ids: | |
- orIds: | |
ids: | |
- authenticated: | |
principalName: | |
exact: spiffe://allow | |
shadowRulesStatPrefix: istio_dry_run_allow_ |