mirror of https://github.com/istio/istio.io.git
64 lines
1.9 KiB
HTML
64 lines
1.9 KiB
HTML
---
|
|
title: RBAC
|
|
description: Adapter that exposes Istio's Role-Based Access Control model.
|
|
location: https://istio.io/docs/reference/config/policy-and-telemetry/adapters/rbac.html
|
|
layout: protoc-gen-docs
|
|
generator: protoc-gen-docs
|
|
redirect_from: /docs/reference/config/adapters/rbac.html
|
|
number_of_entries: 1
|
|
---
|
|
<p>The <code>rbac</code> adapter provides Role-Based Access Control (RBAC) functionality for
|
|
for services within the Istio mesh.</p>
|
|
|
|
<p>This adapter supports the <a href="/docs/reference/config/policy-and-telemetry/templates/authorization/">authorization template</a>.</p>
|
|
|
|
<h2 id="Params">Params</h2>
|
|
<section>
|
|
<p>Configuration format for the <code>rbac</code> adapter.</p>
|
|
|
|
<p>For example, the following configuration defines a RBAC handler with
|
|
configuration store URL pointing to Kubernetes etcd (“k8s://”).
|
|
If you want to run Mixer locally, you can set the configuration store
|
|
URL to a local directory (e.g., “fs:///tmp/testdata/configroot”).</p>
|
|
|
|
<pre><code class="language-yaml">apiVersion: "config.istio.io/v1alpha2"
|
|
kind: rbac
|
|
metadata:
|
|
name: rbachandler
|
|
namespace: istio-system
|
|
spec:
|
|
config_store_url: "fs:///tmp/testdata/config"
|
|
</code></pre>
|
|
|
|
<table class="message-fields">
|
|
<thead>
|
|
<tr>
|
|
<th>Field</th>
|
|
<th>Type</th>
|
|
<th>Description</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr id="Params.config_store_url">
|
|
<td><code>configStoreUrl</code></td>
|
|
<td><code>string</code></td>
|
|
<td>
|
|
<p>URL for the config store. It is used to initiate a new Store instance.
|
|
Following are some examples of the config store URL:
|
|
* “k8s://”
|
|
* “fs:///tmp/testdata/configroot”</p>
|
|
|
|
</td>
|
|
</tr>
|
|
<tr id="Params.cache_duration">
|
|
<td><code>cacheDuration</code></td>
|
|
<td><code><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#duration">google.protobuf.Duration</a></code></td>
|
|
<td>
|
|
<p>The duration for which authorization results may be cached.</p>
|
|
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</section>
|