blob: bd1d1714c12b9b4887eda4ee0f5acbde69222121 [file] [log] [blame]
name: envoy.filters.http.rbac
typedConfig:
'@type': type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
shadowRules:
policies:
ns[foo]-policy[httpbin-1]-rule[0]:
permissions:
- andRules:
rules:
- orRules:
rules:
- urlPath:
path:
exact: /allow
principals:
- andIds:
ids:
- any: true
shadowRulesStatPrefix: istio_dry_run_allow_