mirror of https://github.com/istio/istio.io.git
4 lines
1.9 KiB
XML
4 lines
1.9 KiB
XML
<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Authorization on Istio</title><link>/v1.3/docs/reference/config/authorization/</link><description>Recent content in Authorization on Istio</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><atom:link href="/v1.3/docs/reference/config/authorization/feed.xml" rel="self" type="application/rss+xml"/><item><title>Constraints and Properties</title><link>/v1.3/docs/reference/config/authorization/constraints-and-properties/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/v1.3/docs/reference/config/authorization/constraints-and-properties/</guid><description>This section contains the supported keys and value formats you can use as constraints and properties in the service roles and service role bindings configuration objects. Constraints and properties are extra conditions you can add as fields in configuration objects with a kind: value of ServiceRole and ServiceRoleBinding to specify detailed access control requirements.
|
|
Specifically, you can use constraints to specify extra conditions in the access rule field of a service role.</description></item><item><title>RBAC</title><link>/v1.3/docs/reference/config/authorization/istio.rbac.v1alpha1/</link><pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate><guid>/v1.3/docs/reference/config/authorization/istio.rbac.v1alpha1/</guid><description>Istio RBAC (Role Based Access Control) defines ServiceRole and ServiceRoleBinding objects.
|
|
A ServiceRole specification includes a list of rules (permissions). Each rule has the following standard fields:
|
|
services: a list of services. methods: A list of HTTP methods. You can set the value to * to include all HTTP methods. This field should not be set for TCP services. The policy will be ignored. For gRPC services, only POST is allowed; other methods will result in denying services.</description></item></channel></rss> |