consul/agent/xds/testdata/rbac/default-allow-one-deny.golden

{
  "name": "envoy.filters.network.rbac",
  "config": {
      "rules": {
            "action": "DENY",
            "policies": {
                  "consul-intentions-layer4": {
                        "permissions": [
                              {
                                    "any": true
                                  }
                            ],
                        "principals": [
                              {
                                    "authenticated": {
                                          "principal_name": {
                                                "safe_regex": {
                                                      "google_re2": {
                                                          },
                                                      "regex": "^spiffe://[^/]+/ns/default/dc/[^/]+/svc/web$"
                                                    }
                                              }
                                        }
                                  }
                            ]
                      }
                }
          },
      "stat_prefix": "connect_authz"
    }
}