From 1b47046a96cb6dd344cbaf7c215420a829e6d4df Mon Sep 17 00:00:00 2001 From: Max Resnick Date: Sun, 15 Jun 2025 22:10:32 -0700 Subject: feat: refactor of kustomization.yml --- manifests/base/auth_model.ini | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 manifests/base/auth_model.ini (limited to 'manifests/base/auth_model.ini') diff --git a/manifests/base/auth_model.ini b/manifests/base/auth_model.ini new file mode 100644 index 0000000..9ca4b92 --- /dev/null +++ b/manifests/base/auth_model.ini @@ -0,0 +1,14 @@ +[request_definition] +r = sub, obj, act + +[policy_definition] +p = sub, obj, act + +[role_definition] +g = _, _ + +[policy_effect] +e = some(where (p.eft == allow)) + +[matchers] +m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act -- cgit v1.2.3