Minor cleanup of enabling-policy and rate-limiting for clarity (#4480)

This commit is contained in:
Chris Wilson 2019-06-18 16:48:45 -07:00 committed by mergify[bot]
parent 842b21a9d5
commit c75e1aaf50
2 changed files with 7 additions and 2 deletions

View File

@ -24,7 +24,7 @@ which enables policy checks by default.
disablePolicyChecks: true
{{< /text >}}
If policy enforcement is enabled, no further action is needed.
If policy enforcement is enabled (`disablePolicyChecks` is false), no further action is needed.
1. Edit the `istio` configmap to enable policy checks.

View File

@ -170,10 +170,15 @@ In a realistic scenario you may use a `jwt` token for this purpose.
You can update the `quota rule` by adding a match condition based on the `cookie`.
{{< text yaml >}}
{{< text bash >}}
$ kubectl -n istio-system edit rules quota
{{< /text >}}
{{< text yaml >}}
...
spec:
match: match(request.headers["cookie"], "session=*") == false
actions:
...
{{< /text >}}