Skip to content

Instantly share code, notes, and snippets.

@nrjpoddar

nrjpoddar/policy.yaml

Created February 11, 2020 17:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nrjpoddar/a475ddf8aa58d72dff52312e0fc310b0 to your computer and use it in GitHub Desktop.
Save nrjpoddar/a475ddf8aa58d72dff52312e0fc310b0 to your computer and use it in GitHub Desktop.
Download ZIP
Istio CVE-2020-8595
Raw
policy.yaml
apiVersion: "authentication.istio.io/v1alpha1"
kind: "Policy"
metadata:
name: "jwt-example"
namespace: istio-system
spec:
targets:
- name: istio-ingressgateway
origins:
- jwt:
issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.4/security/tools/jwt/samples/jwks.json"
trigger_rules:
- included_paths:
- exact: /productpage
principalBinding: USE_ORIGIN
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment