This commit is contained in:
John Lancaster
2026-01-02 14:49:10 -06:00
parent a5d0b1cb2f
commit cb530aa864

View File

@@ -18,7 +18,7 @@ static_resources:
require_client_certificate: true
common_tls_context:
tls_params:
tls_minimum_protocol_version: TLSv1_3
tls_minimum_protocol_version: TLSv1_3 # (1)!
validation_context:
trusted_ca: { filename: /certs/root_ca.crt }
match_typed_subject_alt_names:
@@ -29,7 +29,6 @@ static_resources:
- certificate_chain: { filename: /certs/cert.pem }
private_key: { filename: /certs/envoy.pem }
# --8<-- [end:transport_socket]
# --8<-- [start:http]
filters:
- name: envoy.filters.network.http_connection_manager
typed_config:
@@ -65,7 +64,7 @@ static_resources:
rules:
action: ALLOW
policies:
"data_policy":
"test_policy":
permissions:
- and_rules:
rules: