mirror of
https://github.com/status-im/consul.git
synced 2025-01-09 05:23:04 +00:00
f2b7b4591a
Whenver a traffic permission exists for a given workload identity, turn on default deny. Previously, this was only working at the port level.
15 lines
373 B
Protocol Buffer
15 lines
373 B
Protocol Buffer
syntax = "proto3";
|
|
|
|
package hashicorp.consul.auth.v2beta1;
|
|
|
|
import "pbauth/v2beta1/traffic_permissions.proto";
|
|
import "pbresource/annotations.proto";
|
|
|
|
message ComputedTrafficPermissions {
|
|
option (hashicorp.consul.resource.spec) = {scope: SCOPE_NAMESPACE};
|
|
|
|
repeated Permission allow_permissions = 1;
|
|
repeated Permission deny_permissions = 2;
|
|
bool is_default = 3;
|
|
}
|