Search Options

Results per page
Sort
Preferred Languages
Advance

Results 11 - 20 of 175 for Authz (0.11 sec)

  1. pilot/pkg/model/authorization_test.go

    				newConfig("authz-3", "bar", auditPolicy),
    				newConfig("authz-4", "bar", auditPolicy),
    			},
    			wantDeny: []AuthorizationPolicy{
    				{
    					Name:      "authz-2",
    					Namespace: "bar",
    					Spec:      denyPolicy,
    				},
    			},
    			wantAllow: []AuthorizationPolicy{
    				{
    					Name:      "authz-1",
    					Namespace: "bar",
    					Spec:      policy,
    				},
    			},
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Wed Apr 17 22:20:44 UTC 2024
    - 12.7K bytes
    - Viewed (0)
  2. pkg/test/framework/components/authz/kubelocal.go

        service: "{{ .httpHost }}"
        port: {{ .httpPort }}
        headersToUpstreamOnAllow: ["x-ext-authz-*"]
        headersToDownstreamOnDeny: ["x-ext-authz-*"]
        includeRequestHeadersInCheck: ["x-ext-authz"]
        includeAdditionalHeadersInCheck:
          x-ext-authz-additional-header-new: additional-header-new-value
          x-ext-authz-additional-header-override: additional-header-override-value
    - name: "{{ .grpcName }}"
      envoyExtAuthzGrpc:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Jul 25 19:30:47 UTC 2022
    - 5.1K bytes
    - Viewed (0)
  3. pkg/test/framework/components/authz/kube.go

    )
    
    const (
    	httpName = "ext-authz-http"
    	grpcName = "ext-authz-grpc"
    	httpPort = 8000
    	grpcPort = 9000
    
    	providerTemplate = `
    extensionProviders:
    - name: "{{ .httpName }}"
      envoyExtAuthzHttp:
        service: "{{ .fqdn }}"
        port: {{ .httpPort }}
        headersToUpstreamOnAllow: ["x-ext-authz-*"]
        headersToDownstreamOnDeny: ["x-ext-authz-*"]
        includeRequestHeadersInCheck: ["x-ext-authz"]
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Wed Apr 10 20:33:28 UTC 2024
    - 7K bytes
    - Viewed (0)
  4. releasenotes/notes/filter-order.yaml

          
          * Metadata Exchange
          * CUSTOM Authz
          * WASM Authn
          * Authn
          * WASM Authz
          * Authz
          * WASM Stats
          * Stats
          * WASM unspecified
          
          This changes the following areas:
          * Inbound TCP filters now place Metadata Exchange before Authn.
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Fri Sep 15 18:28:50 UTC 2023
    - 895 bytes
    - Viewed (0)
  5. pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-out2.yaml

        path:
        - key: istio_ext_authz_shadow_effective_policy_id
        value:
          stringMatch:
            prefix: istio-ext-authz
      grpcService:
        envoyGrpc:
          authority: my-custom-ext-authz.foo.svc.cluster.local
          clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
        timeout: 0.002s
      statusOnError:
        code: Forbidden
      transportApiVersion: V3
      withRequestBody:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 666 bytes
    - Viewed (0)
  6. tests/integration/security/policy_attachment_only/main_test.go

    )
    
    var (
    	// Namespaces
    	echo1NS  namespace.Instance
    	serverNS namespace.Instance
    
    	// Servers
    	apps             deployment.SingleNamespaceView
    	authzServer      authz.Server
    	localAuthzServer authz.Server
    	jwtServer        jwt.Server
    
    	i istio.Instance
    )
    
    func TestMain(m *testing.M) {
    	framework.
    		NewSuite(m).
    		Label(label.CustomSetup).
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Wed Jan 10 01:47:52 UTC 2024
    - 2.9K bytes
    - Viewed (0)
  7. pilot/pkg/security/authz/builder/testdata/http/custom-grpc-provider-out2.yaml

        path:
        - key: istio_ext_authz_shadow_effective_policy_id
        value:
          stringMatch:
            prefix: istio-ext-authz
      grpcService:
        envoyGrpc:
          authority: my-custom-ext-authz.foo.svc.cluster.local
          clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
        timeout: 0.002s
      statusOnError:
        code: Forbidden
      transportApiVersion: V3
      withRequestBody:
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Aug 07 15:18:13 UTC 2023
    - 666 bytes
    - Viewed (0)
  8. pilot/pkg/security/authz/builder/testdata/tcp/custom-both-http-tcp-out2.yaml

        path:
        - key: istio_ext_authz_shadow_effective_policy_id
        value:
          stringMatch:
            prefix: istio-ext-authz
      grpcService:
        envoyGrpc:
          authority: my-custom-ext-authz.foo.svc.cluster.local
          clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
        timeout: 0.002s
      statPrefix: tcp.
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Aug 07 15:18:13 UTC 2023
    - 582 bytes
    - Viewed (0)
  9. pilot/pkg/security/authz/builder/testdata/http/extended-custom-grpc-provider-no-namespace-out2.yaml

        path:
        - key: istio_ext_authz_shadow_effective_policy_id
        value:
          stringMatch:
            prefix: istio-ext-authz
      grpcService:
        envoyGrpc:
          authority: my-custom-ext-authz.foo.svc.cluster.local
          clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
        timeout: 600s
      statusOnError:
        code: Forbidden
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Mar 25 10:39:25 UTC 2024
    - 589 bytes
    - Viewed (0)
  10. tests/integration/security/main_test.go

    	echo1NS    namespace.Instance
    	echo2NS    namespace.Instance
    	externalNS namespace.Instance
    	serverNS   namespace.Instance
    
    	// Servers
    	apps             deployment.TwoNamespaceView
    	authzServer      authz.Server
    	localAuthzServer authz.Server
    	jwtServer        jwt.Server
    
    	i istio.Instance
    )
    
    func TestMain(m *testing.M) {
    	framework.
    		NewSuite(m).
    		Setup(istio.Setup(&i, func(c resource.Context, cfg *istio.Config) {
    Registered: Fri Jun 14 15:00:06 UTC 2024
    - Last Modified: Mon Apr 15 23:04:36 UTC 2024
    - 2.7K bytes
    - Viewed (0)
Back to top