Skip to content

Commit aa0187a

Browse files
author
Eric Van Norman
authored
Fix link (#2681)
1 parent 964a2f8 commit aa0187a

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

security/v1/authorization_policy.pb.go

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

security/v1/authorization_policy.pb.html

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

security/v1/authorization_policy.proto

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -129,10 +129,10 @@ import "type/v1beta1/selector.proto";
129129
// ports: ["8080"]
130130
// ```
131131
//
132-
// When this rule is applied to TCP traffic, the `method` field (as will all HTTP based attributes) cannot be processed.
132+
// When this rule is applied to TCP traffic, the `method` field (as will all HTTP based attributes) cannot be processed.
133133
// For a `DENY` rule, missing attributes are treated as matches. This means all TCP traffic on port 8080 would be denied in the example above.
134-
// If we were to remove the `ports` match, all TCP traffic would be denied. As a result, it is recommended to always scope `DENY` policies to a specific port,
135-
// especially when using HTTP attributes [Authorization Policy for TCP Ports] (https://istio.io/latest/docs/tasks/security/authorization/authz-tcp/).
134+
// If we were to remove the `ports` match, all TCP traffic would be denied. As a result, it is recommended to always scope `DENY` policies to a specific port,
135+
// especially when using HTTP attributes [Authorization Policy for TCP Ports](https://istio.io/latest/docs/tasks/security/authorization/authz-tcp/).
136136
//
137137
// The following authorization policy sets the `action` to "AUDIT". It will audit any GET requests to the path with the
138138
// prefix "/user/profile".

0 commit comments

Comments
 (0)