mirror of
https://github.com/argoproj/argo-cd.git
synced 2026-02-20 01:28:45 +01:00
363e1d2d49
* feat: Make Casbin matcher configurable on runtime(globMatch(default) or RegexMatch) Signed-off-by: cezhang <c1zhang.dev@gmail.com>
15 lines
337 B
Plaintext
15 lines
337 B
Plaintext
[request_definition]
|
|
r = sub, res, act, obj
|
|
|
|
[policy_definition]
|
|
p = sub, res, act, obj, eft
|
|
|
|
[role_definition]
|
|
g = _, _
|
|
|
|
[policy_effect]
|
|
e = some(where (p.eft == allow)) && !some(where (p.eft == deny))
|
|
|
|
[matchers]
|
|
m = g(r.sub, p.sub) && globOrRegexMatch(r.res, p.res) && globOrRegexMatch(r.act, p.act) && globOrRegexMatch(r.obj, p.obj)
|