RBAC¶

Role-Based Access Control configuration overview.

config.filter.network.rbac.v2.RBAC¶

RBAC network filter config.

Header and Metadata should not be used in rules/shadow_rules in RBAC network filter as this information is only available in RBAC http filter.

{
  "rules": "{...}",
  "shadow_rules": "{...}",
  "stat_prefix": "..."
}

rules: (config.rbac.v2alpha.RBAC) Specify the RBAC rules to be applied globally. If absent, no enforcing RBAC policy will be applied.

shadow_rules: (config.rbac.v2alpha.RBAC) Shadow rules are not enforced by the filter but will emit stats and logs and can be used for rule testing. If absent, no shadow RBAC policy will be applied.

stat_prefix: (string, REQUIRED) The prefix to use when emitting statistics.