another rbac

2026-01-02 23:11:47 -06:00
parent 5e52facc5c
commit 3ca2a092fd
1 changed files with 12 additions and 0 deletions
--- a/envoy.yaml
+++ b/envoy.yaml
@@ -88,6 +88,18 @@ static_resources:
                      - authenticated:
                          principal_name:
                            exact: "spiffe://john-stream.com/john-p14s"
+                  "gitea-policy":
+                    permissions:
+                      - and_rules:
+                          rules:
+                            - header:
+                                name: ":path"
+                                string_match:
+                                  prefix: "/gitea"
+                    principals:
+                      - authenticated:
+                          principal_name:
+                            exact: "spiffe://john-stream.com/gitea"
          # --8<-- [end:rbac]
          - name: envoy.filters.http.router
            typed_config: