john/soteria
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

more rbac

Browse Source
This commit is contained in:
John Lancaster
2026-01-02 23:08:29 -06:00
parent 586c4b47bc
commit 7914368111
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
envoy.yaml
View File

@@ -64,18 +64,30 @@ static_resources:
rules: rules:
action: ALLOW action: ALLOW
policies: policies:
"test_policy": "ubuntu-policy":
permissions: permissions:
- and_rules: - and_rules:
rules: rules:
- header: - header:
name: ":path" name: ":path"
string_match: string_match:
prefix: "/dev-test" prefix: "/john-ubuntu"
principals: principals:
- authenticated: - authenticated:
principal_name: principal_name:
exact: "spiffe://john-stream.com/ubuntu" exact: "spiffe://john-stream.com/ubuntu"
"p14-policy":
permissions:
- and_rules:
rules:
- header:
name: ":path"
string_match:
prefix: "/john-p14s"
principals:
- authenticated:
principal_name:
exact: "spiffe://john-stream.com/john-p14s"
# --8<-- [end:rbac] # --8<-- [end:rbac]
- name: envoy.filters.http.router - name: envoy.filters.http.router
typed_config: typed_config: