mirror of https://github.com/istio/istio.io.git
Minor cleanup of enabling-policy and rate-limiting for clarity (#4480)
This commit is contained in:
parent
842b21a9d5
commit
c75e1aaf50
|
@ -24,7 +24,7 @@ which enables policy checks by default.
|
|||
disablePolicyChecks: true
|
||||
{{< /text >}}
|
||||
|
||||
If policy enforcement is enabled, no further action is needed.
|
||||
If policy enforcement is enabled (`disablePolicyChecks` is false), no further action is needed.
|
||||
|
||||
1. Edit the `istio` configmap to enable policy checks.
|
||||
|
||||
|
|
|
@ -170,10 +170,15 @@ In a realistic scenario you may use a `jwt` token for this purpose.
|
|||
|
||||
You can update the `quota rule` by adding a match condition based on the `cookie`.
|
||||
|
||||
{{< text yaml >}}
|
||||
{{< text bash >}}
|
||||
$ kubectl -n istio-system edit rules quota
|
||||
{{< /text >}}
|
||||
|
||||
{{< text yaml >}}
|
||||
...
|
||||
spec:
|
||||
match: match(request.headers["cookie"], "session=*") == false
|
||||
actions:
|
||||
...
|
||||
{{< /text >}}
|
||||
|
||||
|
|
Loading…
Reference in New Issue