AuthorizationPolicy

object

.spec

Configuration for access control on workloads. See more details at: https://istio.io/docs/reference/config/security/authorization-policy.html
string

.spec .action

Optional.

Valid Options: ALLOW, DENY, AUDIT, CUSTOM
object

.spec .provider

Specifies detailed configuration of the CUSTOM action.
string

.spec .provider .name

Specifies the name of the extension provider.
array

.spec .rules

Optional.
array

.spec .rules[] .from

Optional.
object

.spec .rules[] .from[] .source

Source specifies the source of a request.
array

.spec .rules[] .from[] .source .ipBlocks

Optional.
array

.spec .rules[] .from[] .source .namespaces

Optional.
array

.spec .rules[] .from[] .source .notIpBlocks

Optional.
array

.spec .rules[] .from[] .source .notNamespaces

Optional.
array

.spec .rules[] .from[] .source .notPrincipals

Optional.
array

.spec .rules[] .from[] .source .notRemoteIpBlocks

Optional.
array

.spec .rules[] .from[] .source .notRequestPrincipals

Optional.
array

.spec .rules[] .from[] .source .notServiceAccounts

Optional.
array

.spec .rules[] .from[] .source .principals

Optional.
array

.spec .rules[] .from[] .source .remoteIpBlocks

Optional.
array

.spec .rules[] .from[] .source .requestPrincipals

Optional.
array

.spec .rules[] .from[] .source .serviceAccounts

Optional.
array

.spec .rules[] .to

Optional.
object

.spec .rules[] .to[] .operation

Operation specifies the operation of a request.
array

.spec .rules[] .to[] .operation .hosts

Optional.
array

.spec .rules[] .to[] .operation .methods

Optional.
array

.spec .rules[] .to[] .operation .notHosts

Optional.
array

.spec .rules[] .to[] .operation .notMethods

Optional.
array

.spec .rules[] .to[] .operation .notPaths

Optional.
array

.spec .rules[] .to[] .operation .notPorts

Optional.
array

.spec .rules[] .to[] .operation .paths

Optional.
array

.spec .rules[] .to[] .operation .ports

Optional.
array

.spec .rules[] .when

Optional.
string required

.spec .rules[] .when[] .key

The name of an Istio attribute.
array

.spec .rules[] .when[] .notValues

Optional.
array

.spec .rules[] .when[] .values

Optional.
object

.spec .selector

Optional.
object

.spec .selector .matchLabels

One or more labels that indicate a specific set of pods/VMs on which a policy should be applied.
object

.spec .targetRef
string

.spec .targetRef .group

group is the group of the target resource.
string required

.spec .targetRef .kind

kind is kind of the target resource.
string required

.spec .targetRef .name

name is the name of the target resource.
string

.spec .targetRef .namespace

namespace is the namespace of the referent.
array

.spec .targetRefs

Optional.
string

.spec .targetRefs[] .group

group is the group of the target resource.
string required

.spec .targetRefs[] .kind

kind is kind of the target resource.
string required

.spec .targetRefs[] .name

name is the name of the target resource.
string

.spec .targetRefs[] .namespace

namespace is the namespace of the referent.
object

.status
array

.status .conditions

Current service state of the resource.
string

.status .conditions[] .lastProbeTime

Last time we probed the condition.
string

.status .conditions[] .lastTransitionTime

Last time the condition transitioned from one status to another.
string

.status .conditions[] .message

Human-readable message indicating details about last transition.
integer | string

.status .conditions[] .observedGeneration

Resource Generation to which the Condition refers.
string

.status .conditions[] .reason

Unique, one-word, CamelCase reason for the condition’s last transition.
string

.status .conditions[] .status

Status is the status of the condition.
string

.status .conditions[] .type

Type is the type of the condition.
integer | string

.status .observedGeneration
array

.status .validationMessages

Includes any errors or warnings detected by Istio’s analyzers.
string

.status .validationMessages[] .documentationUrl

A url pointing to the Istio documentation for this specific error type.
string

.status .validationMessages[] .level

Represents how severe a message is.

Valid Options: UNKNOWN, ERROR, WARNING, INFO
object

.status .validationMessages[] .type
string

.status .validationMessages[] .type .code

A 7 character code matching ^IST[0-9]{4}$ intended to uniquely identify the message type.
string

.status .validationMessages[] .type .name

A human-readable name for the message type.