comments
This commit is contained in:
@@ -18,7 +18,7 @@ static_resources:
|
||||
require_client_certificate: true
|
||||
common_tls_context:
|
||||
tls_params:
|
||||
tls_minimum_protocol_version: TLSv1_3
|
||||
tls_minimum_protocol_version: TLSv1_3 # (1)!
|
||||
validation_context:
|
||||
trusted_ca: { filename: /certs/root_ca.crt }
|
||||
match_typed_subject_alt_names:
|
||||
@@ -29,7 +29,6 @@ static_resources:
|
||||
- certificate_chain: { filename: /certs/cert.pem }
|
||||
private_key: { filename: /certs/envoy.pem }
|
||||
# --8<-- [end:transport_socket]
|
||||
# --8<-- [start:http]
|
||||
filters:
|
||||
- name: envoy.filters.network.http_connection_manager
|
||||
typed_config:
|
||||
@@ -65,7 +64,7 @@ static_resources:
|
||||
rules:
|
||||
action: ALLOW
|
||||
policies:
|
||||
"data_policy":
|
||||
"test_policy":
|
||||
permissions:
|
||||
- and_rules:
|
||||
rules:
|
||||
|
||||
Reference in New Issue
Block a user