Skip to content

Commit 5401955

Browse files
Revolyssupl5io
authored andcommitted
[Patterns] Pattern components generated from latest Istio manifests
Signed-off-by: l5io <[email protected]>
1 parent 8deb717 commit 5401955

File tree

28 files changed

+4900
-0
lines changed

28 files changed

+4900
-0
lines changed
Lines changed: 249 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,249 @@
1+
{
2+
"description": "Configuration for access control on workloads. See more details at: https://istio.io/docs/reference/config/security/authorization-policy.html",
3+
"oneOf": [
4+
{
5+
"not": {
6+
"anyOf": [
7+
{
8+
"required": [
9+
"provider"
10+
]
11+
}
12+
]
13+
}
14+
},
15+
{
16+
"required": [
17+
"provider"
18+
]
19+
}
20+
],
21+
"properties": {
22+
"action": {
23+
"description": "Optional.",
24+
"enum": [
25+
"ALLOW",
26+
"DENY",
27+
"AUDIT",
28+
"CUSTOM"
29+
],
30+
"type": "string"
31+
},
32+
"provider": {
33+
"description": "Specifies detailed configuration of the CUSTOM action.",
34+
"properties": {
35+
"name": {
36+
"description": "Specifies the name of the extension provider.",
37+
"type": "string"
38+
}
39+
},
40+
"type": "object"
41+
},
42+
"rules": {
43+
"description": "Optional.",
44+
"items": {
45+
"properties": {
46+
"from": {
47+
"description": "Optional.",
48+
"items": {
49+
"properties": {
50+
"source": {
51+
"description": "Source specifies the source of a request.",
52+
"properties": {
53+
"ipBlocks": {
54+
"description": "Optional.",
55+
"items": {
56+
"type": "string"
57+
},
58+
"type": "array"
59+
},
60+
"namespaces": {
61+
"description": "Optional.",
62+
"items": {
63+
"type": "string"
64+
},
65+
"type": "array"
66+
},
67+
"notIpBlocks": {
68+
"description": "Optional.",
69+
"items": {
70+
"type": "string"
71+
},
72+
"type": "array"
73+
},
74+
"notNamespaces": {
75+
"description": "Optional.",
76+
"items": {
77+
"type": "string"
78+
},
79+
"type": "array"
80+
},
81+
"notPrincipals": {
82+
"description": "Optional.",
83+
"items": {
84+
"type": "string"
85+
},
86+
"type": "array"
87+
},
88+
"notRemoteIpBlocks": {
89+
"description": "Optional.",
90+
"items": {
91+
"type": "string"
92+
},
93+
"type": "array"
94+
},
95+
"notRequestPrincipals": {
96+
"description": "Optional.",
97+
"items": {
98+
"type": "string"
99+
},
100+
"type": "array"
101+
},
102+
"principals": {
103+
"description": "Optional.",
104+
"items": {
105+
"type": "string"
106+
},
107+
"type": "array"
108+
},
109+
"remoteIpBlocks": {
110+
"description": "Optional.",
111+
"items": {
112+
"type": "string"
113+
},
114+
"type": "array"
115+
},
116+
"requestPrincipals": {
117+
"description": "Optional.",
118+
"items": {
119+
"type": "string"
120+
},
121+
"type": "array"
122+
}
123+
},
124+
"type": "object"
125+
}
126+
},
127+
"type": "object"
128+
},
129+
"type": "array"
130+
},
131+
"to": {
132+
"description": "Optional.",
133+
"items": {
134+
"properties": {
135+
"operation": {
136+
"description": "Operation specifies the operation of a request.",
137+
"properties": {
138+
"hosts": {
139+
"description": "Optional.",
140+
"items": {
141+
"type": "string"
142+
},
143+
"type": "array"
144+
},
145+
"methods": {
146+
"description": "Optional.",
147+
"items": {
148+
"type": "string"
149+
},
150+
"type": "array"
151+
},
152+
"notHosts": {
153+
"description": "Optional.",
154+
"items": {
155+
"type": "string"
156+
},
157+
"type": "array"
158+
},
159+
"notMethods": {
160+
"description": "Optional.",
161+
"items": {
162+
"type": "string"
163+
},
164+
"type": "array"
165+
},
166+
"notPaths": {
167+
"description": "Optional.",
168+
"items": {
169+
"type": "string"
170+
},
171+
"type": "array"
172+
},
173+
"notPorts": {
174+
"description": "Optional.",
175+
"items": {
176+
"type": "string"
177+
},
178+
"type": "array"
179+
},
180+
"paths": {
181+
"description": "Optional.",
182+
"items": {
183+
"type": "string"
184+
},
185+
"type": "array"
186+
},
187+
"ports": {
188+
"description": "Optional.",
189+
"items": {
190+
"type": "string"
191+
},
192+
"type": "array"
193+
}
194+
},
195+
"type": "object"
196+
}
197+
},
198+
"type": "object"
199+
},
200+
"type": "array"
201+
},
202+
"when": {
203+
"description": "Optional.",
204+
"items": {
205+
"properties": {
206+
"key": {
207+
"description": "The name of an Istio attribute.",
208+
"type": "string"
209+
},
210+
"notValues": {
211+
"description": "Optional.",
212+
"items": {
213+
"type": "string"
214+
},
215+
"type": "array"
216+
},
217+
"values": {
218+
"description": "Optional.",
219+
"items": {
220+
"type": "string"
221+
},
222+
"type": "array"
223+
}
224+
},
225+
"type": "object"
226+
},
227+
"type": "array"
228+
}
229+
},
230+
"type": "object"
231+
},
232+
"type": "array"
233+
},
234+
"selector": {
235+
"description": "Optional.",
236+
"properties": {
237+
"matchLabels": {
238+
"additionalProperties": {
239+
"type": "string"
240+
},
241+
"type": "object"
242+
}
243+
},
244+
"type": "object"
245+
}
246+
},
247+
"title": "Authorization Policy",
248+
"type": "object"
249+
}
Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
{
2+
"kind": "WorkloadDefinition",
3+
"apiVersion": "core.oam.dev/v1alpha1",
4+
"metadata": {
5+
"name": "AuthorizationPolicy.Istio",
6+
"creationTimestamp": null
7+
},
8+
"spec": {
9+
"definitionRef": {
10+
"name": "authorizationpolicy.Istio.meshery.layer5.io"
11+
},
12+
"metadata": {
13+
"@type": "pattern.meshery.io/mesh/workload",
14+
"k8sAPIVersion": "security.istio.io/v1beta1",
15+
"k8sKind": "AuthorizationPolicy",
16+
"meshName": "ISTIO",
17+
"meshVersion": "1.13.0"
18+
}
19+
}
20+
}

0 commit comments

Comments
 (0)