You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
// When this rule is applied to TCP traffic, the `method` field (as will all HTTP based attributes) cannot be processed.
132
+
// When this rule is applied to TCP traffic, the `method` field (as will all HTTP based attributes) cannot be processed.
133
133
// For a `DENY` rule, missing attributes are treated as matches. This means all TCP traffic on port 8080 would be denied in the example above.
134
-
// If we were to remove the `ports` match, all TCP traffic would be denied. As a result, it is recommended to always scope `DENY` policies to a specific port,
135
-
// especially when using HTTP attributes [Authorization Policy for TCP Ports](https://istio.io/latest/docs/tasks/security/authorization/authz-tcp/).
134
+
// If we were to remove the `ports` match, all TCP traffic would be denied. As a result, it is recommended to always scope `DENY` policies to a specific port,
135
+
// especially when using HTTP attributes [Authorization Policy for TCP Ports](https://istio.io/latest/docs/tasks/security/authorization/authz-tcp/).
136
136
//
137
137
// The following authorization policy sets the `action` to "AUDIT". It will audit any GET requests to the path with the
138
138
// prefix "/user/profile".
@@ -415,7 +415,7 @@ message Source {
415
415
repeatedstringnot_ip_blocks=8;
416
416
417
417
// Optional. A list of IP blocks, populated from X-Forwarded-For header or proxy protocol.
418
-
// To make use of this field, you must configure the numTrustedProxies field of the gatewayTopology under the meshConfig
418
+
// To make use of this field, you must configure the numTrustedProxies field of the gatewayTopology under the meshConfig
419
419
// when you install Istio or using an annotation on the ingress gateway. See the documentation here:
0 commit comments