principal2 - Code Search

pilot/pkg/security/authz/builder/testdata/tcp/deny-both-http-tcp-out.yaml

                        exact: spiffe://not-principal
                  - authenticated:
                      principalName:
                        safeRegex:
                          regex: spiffe://.*not-principal-suffix
                  - authenticated:
                      principalName:
                        prefix: spiffe://not-principal-prefix
                  - authenticated:
                      principalName:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Oct 17 16:35:46 UTC 2023

- 11.1K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/security/authz/builder/testdata/http/simple-policy-td-aliases-in.yaml

  selector:
    matchLabels:
      app: httpbin
      version: v1
  rules:
    - from:
        - source:
            principals: ["cluster.local/ns/rule[0]/sa/from[0]-principal[0]"]
        - source:
            principals: ["cluster.local/ns/rule[0]/sa/from[1]-principal[0]", "cluster.local/ns/rule[0]/sa/from[1]-principal[1]"]
            namespaces: ["rule[0]-from[1]-ns[0]"]
      to:
        - operation:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Apr 01 19:25:01 UTC 2021

- 759 bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/serviceregistry/kube/controller/ambient/testdata/deny-groups-in.yaml

  rules:
  # Has mix of L4 and L7 in from
  - from:
    - source:
        principals: ["from-mix-principal"]
        requestPrincipals: ["from-mix-requestPrincipals"]
        namespaces: ["from-mix-ns"]
    to:
    - operation:
        ports: ["80"]
  # Has mix of L4 and L7 in to
  - from:
    - source:
        principals: ["to-mix-principal"]
        namespaces: ["to-mix-ns"]
    to:
    - operation:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Feb 29 18:40:34 UTC 2024

- 1.4K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/security/authz/builder/testdata/http/simple-policy-td-aliases-out.yaml

        - andIds:
            ids:
            - orIds:
                ids:
                - authenticated:
                    principalName:
                      exact: spiffe://td1/ns/rule[0]/sa/from[1]-principal[0]
                - authenticated:
                    principalName:
                      exact: spiffe://cluster.local/ns/rule[0]/sa/from[1]-principal[0]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Tue Oct 17 16:35:46 UTC 2023

- 2.4K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/serviceregistry/kube/controller/ambient/testdata/allow-full.yaml

groups:
- rules:
  - matches:
    - notPrincipals:
      - exact: not-principal
      - prefix: not-principal-prefix-
      - suffix: -suffix-not-principal
      - presence: {}
      principals:
      - exact: principal
      - prefix: principal-prefix-
      - suffix: -suffix-principal
      - presence: {}
- rules:
  - matches:
    - namespaces:
      - exact: ns
      - prefix: ns-prefix-
      - suffix: -ns-suffix

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Feb 29 18:40:34 UTC 2024

- 2.1K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/security/authz/builder/testdata/http/single-policy-in.yaml

metadata:
  name: httpbin
  namespace: foo
spec:
  selector:
    matchLabels:
      app: httpbin
      version: v1
  rules:
    - from:
        - source:
            principals: ["rule[0]-from[0]-principal[1]", "rule[0]-from[0]-principal[2]"]
            requestPrincipals: ["rule[0]-from[0]-requestPrincipal[1]", "rule[0]-from[0]-requestPrincipal[2]"]
            namespaces: ["rule[0]-from[0]-ns[1]", "rule[0]-from[0]-ns[2]"]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Apr 01 19:25:01 UTC 2021

- 3.1K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/serviceregistry/kube/controller/ambient/testdata/deny-groups.yaml

    - destinationPorts:
      - 80
  - matches:
    - namespaces:
      - exact: from-mix-ns
      principals:
      - exact: from-mix-principal
- rules:
  - matches:
    - destinationPorts:
      - 80
  - matches:
    - namespaces:
      - exact: to-mix-ns
      principals:
      - exact: to-mix-principal
- rules:
  - matches:
    - destinationPorts:
      - 80
  - matches:
    - namespaces:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Feb 29 18:40:34 UTC 2024

- 955 bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/security/authz/builder/testdata/http/extended-simple-policy-td-aliases-out.yaml

        - andIds:
            ids:
            - orIds:
                ids:
                - authenticated:
                    principalName:
                      exact: spiffe://td1/ns/rule[0]/sa/from[1]-principal[0]
                - authenticated:
                    principalName:
                      exact: spiffe://cluster.local/ns/rule[0]/sa/from[1]-principal[0]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Mon Mar 25 10:39:25 UTC 2024

- 2.4K bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/security/authz/builder/testdata/http/simple-policy-multiple-td-aliases-in.yaml

  selector:
    matchLabels:
      app: httpbin
      version: v1
  rules:
    - from:
        - source:
            principals: ["cluster.local/ns/rule[0]/sa/from[0]-principal[0]"]
        - source:
            principals: ["some-td/ns/rule[0]/sa/from[1]-principal[0]", "cluster.local/ns/rule[0]/sa/from[1]-principal[1]"]

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Apr 01 19:25:01 UTC 2021

- 485 bytes

- Viewed (0)

github.com/istio/istio

pilot/pkg/serviceregistry/kube/controller/ambient/testdata/allow-groups-in.yaml

spec:
  rules:
  # Has mix of L4 and L7 in from
  - from:
    - source:
        principals: ["from-mix-principal"]
        requestPrincipals: ["from-mix-requestPrincipals"]
        namespaces: ["from-mix-ns"]
    to:
    - operation:
        ports: ["80"]
  # Has mix of L4 and L7 in to
  - from:
    - source:
        principals: ["to-mix-principal"]
        namespaces: ["to-mix-ns"]
    to:
    - operation:

Registered: Fri Jun 14 15:00:06 UTC 2024

- Last Modified: Thu Feb 29 18:40:34 UTC 2024

- 1.3K bytes

- Viewed (0)

Search Options