more rbac

2026-01-02 23:08:29 -06:00
parent 586c4b47bc
commit 7914368111
1 changed files with 14 additions and 2 deletions
--- a/envoy.yaml
+++ b/envoy.yaml
@@ -64,18 +64,30 @@ static_resources:
              rules:
                action: ALLOW
                policies:
-                  "test_policy":
+                  "ubuntu-policy":
                    permissions:
                      - and_rules:
                          rules:
                            - header:
                                name: ":path"
                                string_match:
-                                  prefix: "/dev-test"
+                                  prefix: "/john-ubuntu"
                    principals:
                      - authenticated:
                          principal_name:
                            exact: "spiffe://john-stream.com/ubuntu"
+                  "p14-policy":
+                    permissions:
+                      - and_rules:
+                          rules:
+                            - header:
+                                name: ":path"
+                                string_match:
+                                  prefix: "/john-p14s"
+                    principals:
+                      - authenticated:
+                          principal_name:
+                            exact: "spiffe://john-stream.com/john-p14s"
          # --8<-- [end:rbac]
          - name: envoy.filters.http.router
            typed_config: