Enum AuthorizationPolicyAction
Action specifies the operation to take for an V1AuthorizationPolicy.
Namespace: Neon.Kube.Resources.Istio
Assembly: Neon.Kube.Resources.dll
Syntax
[JsonConverter(typeof(JsonStringEnumMemberConverter))]
public enum AuthorizationPolicyAction
Fields
Name | Description |
---|---|
Allow | Allow a request only if it matches the rules. This is the default type. |
Audit | Audit a request if it matches any of the rules. |
Custom | The CUSTOM action allows an extension to handle the user request if the matching rules evaluate to true. The extension is evaluated independently and before the native ALLOW and DENY actions. When used together, A request is allowed if and only if all the actions return allow, in other words, the extension cannot bypass the authorization decision made by ALLOW and DENY action. Extension behavior is defined by the named providers declared in MeshConfig. The authorization policy refers to the extension by specifying the name of the provider. One example use case of the extension is to integrate with a custom external authorization system to delegate the authorization decision to it. |
Deny | Deny a request if it matches any of the rules. |