envoyproxy / envoyproxy/gateway

Support XFFC validation as First class api in SecurityPolicy

Open
#5,392 6 comments 0 reactions 1 assignee Claimed by @joshuaecook View on GitHub
area/api area/policy
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:
>When using mTLS for AuthN, RBAC AuthZ should support client certification validation
```
authorization:
defaultAction: Deny
rules:
principal:
clientCert:
Subject: foo.bar.com
URI: http://foo.bar.com
```
[optional *Relevant Links*:]
https://github.com/envoyproxy/gateway/issues/2250
https://github.com/envoyproxy/gateway/pull/5310

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.