Skip to search

AuthorizationPolicy

security.istio.io / v1beta1

apiVersion: security.istio.io/v1beta1 kind: AuthorizationPolicy metadata: name: example
View raw schema
spec object
Configuration for access control on workloads. See more details at: https://istio.io/docs/reference/config/security/authorization-policy.html
action string
Optional. Valid Options: ALLOW, DENY, AUDIT, CUSTOM
enum: ALLOW, DENY, AUDIT, CUSTOM
provider object
Specifies detailed configuration of the CUSTOM action.
name string
Specifies the name of the extension provider.
rules []object
Optional.
from []object
Optional.
source object
Source specifies the source of a request.
ipBlocks []string
Optional.
namespaces []string
Optional.
notIpBlocks []string
Optional.
notNamespaces []string
Optional.
notPrincipals []string
Optional.
notRemoteIpBlocks []string
Optional.
notRequestPrincipals []string
Optional.
principals []string
Optional.
remoteIpBlocks []string
Optional.
requestPrincipals []string
Optional.
to []object
Optional.
operation object
Operation specifies the operation of a request.
hosts []string
Optional.
methods []string
Optional.
notHosts []string
Optional.
notMethods []string
Optional.
notPaths []string
Optional.
notPorts []string
Optional.
paths []string
Optional.
ports []string
Optional.
when []object
Optional.
key string required
The name of an Istio attribute.
notValues []string
Optional.
values []string
Optional.
selector object
Optional.
matchLabels object
One or more labels that indicate a specific set of pods/VMs on which a policy should be applied.
targetRef object
group string
group is the group of the target resource.
pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
maxLength: 253
kind string required
kind is kind of the target resource.
pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
minLength: 1
maxLength: 63
name string required
name is the name of the target resource.
minLength: 1
maxLength: 253
namespace string
namespace is the namespace of the referent.
targetRefs []object
Optional.
group string
group is the group of the target resource.
pattern: ^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$
maxLength: 253
kind string required
kind is kind of the target resource.
pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$
minLength: 1
maxLength: 63
name string required
name is the name of the target resource.
minLength: 1
maxLength: 253
namespace string
namespace is the namespace of the referent.
status object

No matches. Try .spec.action for an exact path