api
api copied to clipboard
Support configuring deny for AuthorizationPolicy
xref https://github.com/istio/istio/issues/31452
😊 Welcome @wzshiming! This is either your first contribution to the Istio api repo, or it's been awhile since you've been here.
You can learn more about the Istio working groups, code of conduct, and contributing guidelines by referring to Contributing to Istio.
Thanks for contributing!
Courtesy of your friendly welcome wagon.
@wzshiming: The following test failed, say /retest to rerun all failed tests:
| Test name | Commit | Details | Rerun command |
|---|---|---|---|
| release-notes_api | 585ffab640c49f5264c665557dbce86791e06fee | link | /test release-notes_api |
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.
I am not sure how common this is that it warrants the API here. Is this an option exposed by other softwares offering authz?
If it is, is this the right place to put it? This is not a concern that applies only to authz - also to the authn rejections, and even virtual service direct response are highly related.
@yangminzhu @howardjohn Thanks for reminding, I noticed the newly opened https://github.com/istio/enhancements repository, open an issues to add documentation?
@yangminzhu @howardjohn Thanks for reminding, I noticed the newly opened https://github.com/istio/enhancements repository, open an issues to add documentation?
I think you could start a short doc with some more details about the API change, share it to the community for comments and if possible bring it up in the security WG for some discussions. See the guidance in https://github.com/istio/enhancements#when-to-create-a-new-enhancement-issue
@wzshiming: PR needs rebase.
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.
🚧 This issue or pull request has been closed due to not having had activity from an Istio team member since 2021-03-17. If you feel this issue or pull request deserves attention, please reopen the issue. Please see this wiki page for more information. Thank you for your contributions.
Created by the issue and PR lifecycle manager.