mirror of
https://github.com/argoproj/argo-cd
synced 2026-04-21 17:07:16 +00:00
363e1d2d49
* feat: Make Casbin matcher configurable on runtime(globMatch(default) or RegexMatch) Signed-off-by: cezhang <c1zhang.dev@gmail.com>
14 lines
337 B
Text
14 lines
337 B
Text
[request_definition]
|
|
r = sub, res, act, obj
|
|
|
|
[policy_definition]
|
|
p = sub, res, act, obj, eft
|
|
|
|
[role_definition]
|
|
g = _, _
|
|
|
|
[policy_effect]
|
|
e = some(where (p.eft == allow)) && !some(where (p.eft == deny))
|
|
|
|
[matchers]
|
|
m = g(r.sub, p.sub) && globOrRegexMatch(r.res, p.res) && globOrRegexMatch(r.act, p.act) && globOrRegexMatch(r.obj, p.obj)
|