istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

gateway-api: use targetRef instead of selector for auth/authz gateway… (#14157) 

* gateway-api: use targetRef instead of selector for auth/authz gateway refs

* regen

* fix yaml

* regen
This commit is contained in:
Frank Budinsky 2023-11-15 10:57:05 -05:00 committed by GitHub
parent c83b7f4434
commit 83bae38f99
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
6 changed files with 100 additions and 80 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
content/en/docs/ops/ambient/getting-started/index.md
View File

@ -377,9 +377,10 @@ metadata:
name: productpage-viewer name: productpage-viewer
namespace: default namespace: default
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: bookinfo-productpage group: gateway.networking.k8s.io
name: bookinfo-productpage
action: ALLOW action: ALLOW
rules: rules:
- from: - from:

7
content/en/docs/ops/ambient/getting-started/snips.sh
View File

@ -241,9 +241,10 @@ metadata:
name: productpage-viewer name: productpage-viewer
namespace: default namespace: default
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: bookinfo-productpage group: gateway.networking.k8s.io
name: bookinfo-productpage
action: ALLOW action: ALLOW
rules: rules:
- from: - from:

21
content/en/docs/tasks/security/authentication/authn-policy/index.md
View File

@ -405,9 +405,10 @@ metadata:
name: "jwt-example" name: "jwt-example"
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
jwtRules: jwtRules:
- issuer: "testing@secure.istio.io" - issuer: "testing@secure.istio.io"
jwksUri: "{{< github_file >}}/security/tools/jwt/samples/jwks.json" jwksUri: "{{< github_file >}}/security/tools/jwt/samples/jwks.json"
@ -519,9 +520,10 @@ metadata:
name: "frontend-ingress" name: "frontend-ingress"
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:
@ -583,9 +585,10 @@ metadata:
name: "frontend-ingress" name: "frontend-ingress"
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:

21
content/en/docs/tasks/security/authentication/authn-policy/snips.sh
View File

@ -310,9 +310,10 @@ metadata:
name: "jwt-example" name: "jwt-example"
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
jwtRules: jwtRules:
- issuer: "testing@secure.istio.io" - issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json" jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
@ -397,9 +398,10 @@ metadata:
name: "frontend-ingress" name: "frontend-ingress"
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:
@ -446,9 +448,10 @@ metadata:
name: "frontend-ingress" name: "frontend-ingress"
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:

42
content/en/docs/tasks/security/authorization/authz-ingress/index.md
View File

@ -365,9 +365,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -386,9 +387,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -513,9 +515,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -534,9 +537,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -620,9 +624,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:
@ -641,9 +646,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:

42
content/en/docs/tasks/security/authorization/authz-ingress/snips.sh
View File

@ -201,9 +201,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -220,9 +221,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -317,9 +319,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -336,9 +339,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: ALLOW action: ALLOW
rules: rules:
- from: - from:
@ -401,9 +405,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from:
@ -420,9 +425,10 @@ metadata:
name: ingress-policy name: ingress-policy
namespace: foo namespace: foo
spec: spec:
selector: targetRef:
matchLabels: kind: Gateway
istio.io/gateway-name: httpbin-gateway group: gateway.networking.k8s.io
name: httpbin-gateway
action: DENY action: DENY
rules: rules:
- from: - from: