consul/agent/xds/testdata/rbac/default-allow-one-deny.golden

{
  "name": "envoy.filters.network.rbac",
  "typedConfig": {
    "@type": "type.googleapis.com/envoy.config.filter.network.rbac.v2.RBAC",
    "rules": {
      "action": "DENY",
      "policies": {
        "consul-intentions-layer4": {
          "permissions": [
            {
              "any": true
            }
          ],
          "principals": [
            {
              "authenticated": {
                "principalName": {
                  "safeRegex": {
                    "googleRe2": {

                    },
                    "regex": "^spiffe://[^/]+/ns/default/dc/[^/]+/svc/web$"
                  }
                }
              }
            }
          ]
        }
      }
    },
    "statPrefix": "connect_authz"
  }
}