Search Options

Results per page
Sort
Preferred Languages
Advance

Results 1 - 10 of 34 for Authz (0.12 sec)

  1. istioctl/pkg/authz/authz.go

    		Example: `  # Check AuthorizationPolicy applied to pod httpbin-88ddbcfdd-nt5jb:
      istioctl x authz check httpbin-88ddbcfdd-nt5jb
    
      # Check AuthorizationPolicy applied to one pod under a deployment
      istioctl x authz check deployment/productpage-v1
    
      # Check AuthorizationPolicy from Envoy config dump file:
      istioctl x authz check -f httpbin_config_dump.json`,
    		Args: func(cmd *cobra.Command, args []string) error {
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Sat Apr 13 05:23:38 UTC 2024
    - 5K bytes
    - Viewed (0)
  2. pkg/registry/admissionregistration/validatingadmissionpolicybinding/authz.go

    Mikalai Radchuk <******@****.***> 1714565943 +0200
    Registered: Sat Jun 15 01:39:40 UTC 2024
    - Last Modified: Wed May 01 12:19:03 UTC 2024
    - 3.7K bytes
    - Viewed (0)
  3. pkg/test/framework/components/authz/kube.go

    )
    
    const (
    	httpName = "ext-authz-http"
    	grpcName = "ext-authz-grpc"
    	httpPort = 8000
    	grpcPort = 9000
    
    	providerTemplate = `
    extensionProviders:
    - name: "{{ .httpName }}"
      envoyExtAuthzHttp:
        service: "{{ .fqdn }}"
        port: {{ .httpPort }}
        headersToUpstreamOnAllow: ["x-ext-authz-*"]
        headersToDownstreamOnDeny: ["x-ext-authz-*"]
        includeRequestHeadersInCheck: ["x-ext-authz"]
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Wed Apr 10 20:33:28 UTC 2024
    - 7K bytes
    - Viewed (0)
  4. pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-out2.yaml

        path:
        - key: istio_ext_authz_shadow_effective_policy_id
        value:
          stringMatch:
            prefix: istio-ext-authz
      grpcService:
        envoyGrpc:
          authority: my-custom-ext-authz.foo.svc.cluster.local
          clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
        timeout: 0.002s
      statusOnError:
        code: Forbidden
      transportApiVersion: V3
      withRequestBody:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 666 bytes
    - Viewed (0)
  5. pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-no-namespace-out2.yaml

        path:
        - key: istio_ext_authz_shadow_effective_policy_id
        value:
          stringMatch:
            prefix: istio-ext-authz
      grpcService:
        envoyGrpc:
          authority: my-custom-ext-authz.foo.svc.cluster.local
          clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
        timeout: 600s
      statusOnError:
        code: Forbidden
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 589 bytes
    - Viewed (0)
  6. tests/integration/security/main_test.go

    	echo1NS    namespace.Instance
    	echo2NS    namespace.Instance
    	externalNS namespace.Instance
    	serverNS   namespace.Instance
    
    	// Servers
    	apps             deployment.TwoNamespaceView
    	authzServer      authz.Server
    	localAuthzServer authz.Server
    	jwtServer        jwt.Server
    
    	i istio.Instance
    )
    
    func TestMain(m *testing.M) {
    	framework.
    		NewSuite(m).
    		Setup(istio.Setup(&i, func(c resource.Context, cfg *istio.Config) {
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Apr 15 23:04:36 UTC 2024
    - 2.7K bytes
    - Viewed (0)
  7. pilot/pkg/security/authz/builder/testdata/http/extended-custom-http-provider-out2.yaml

              prefix: x-prefix-
            - ignoreCase: true
              suffix: -suffix
        pathPrefix: /check
        serverUri:
          cluster: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
          timeout: 10s
          uri: http://my-custom-ext-authz.foo.svc.cluster.local
      statusOnError:
        code: Forbidden
      transportApiVersion: V3
      withRequestBody:
        allowPartialMessage: true
        maxRequestBytes: 2048
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 1.6K bytes
    - Viewed (0)
  8. pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-no-namespace-out1.yaml

        action: DENY
        policies:
          istio-ext-authz-ns[foo]-policy[httpbin-1]-rule[0]:
            permissions:
            - andRules:
                rules:
                - orRules:
                    rules:
                    - urlPath:
                        path:
                          exact: /httpbin1
            principals:
            - andIds:
                ids:
                - any: true
          istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 873 bytes
    - Viewed (0)
  9. pilot/pkg/security/authz/builder/testdata/http/extended-custom-http-provider-out1.yaml

        action: DENY
        policies:
          istio-ext-authz-ns[foo]-policy[httpbin-1]-rule[0]:
            permissions:
            - andRules:
                rules:
                - orRules:
                    rules:
                    - urlPath:
                        path:
                          exact: /httpbin1
            principals:
            - andIds:
                ids:
                - any: true
          istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 873 bytes
    - Viewed (0)
  10. pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-out1.yaml

        action: DENY
        policies:
          istio-ext-authz-ns[foo]-policy[httpbin-1]-rule[0]:
            permissions:
            - andRules:
                rules:
                - orRules:
                    rules:
                    - urlPath:
                        path:
                          exact: /httpbin1
            principals:
            - andIds:
                ids:
                - any: true
          istio-ext-authz-ns[foo]-policy[httpbin-2]-rule[0]:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 873 bytes
    - Viewed (0)
Back to top