https://pastein.ru/t/EcW
Загрузка данных
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-ips-dev get authorizationpolicy
NAME AGE
base-psvc-approval-workflow 2y186d
base-psvc-cdm-recommendation-service 2y130d
base-psvc-document-factory-service 2y61d
base-psvc-document-factory-templates 333d
base-psvc-idp 606d
base-psvc-ips-external-dictionaries 159d
base-psvc-ips-file-wire 144d
base-psvc-ips-notifications 217d
base-psvc-mdm 3y124d
base-psvc-notification-service 2y313d
base-psvc-orc-gateway 431d
base-psvc-orc-http-adapter 134d
base-psvc-rdm 95d
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-ips-dev get requestauthentication
NAME AGE
base-psvc-approval-workflow 2y186d
base-psvc-cdm-recommendation-service 2y130d
base-psvc-document-factory-service 2y61d
base-psvc-document-factory-templates 333d
base-psvc-idp 606d
base-psvc-ips-external-dictionaries 159d
base-psvc-ips-file-wire 144d
base-psvc-ips-notifications 217d
base-psvc-mdm 3y124d
base-psvc-notification-service 2y313d
base-psvc-orc-gateway 431d
base-psvc-orc-http-adapter 134d
base-psvc-rdm 95d
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-ips-dev get envoyfilter
NAME AGE
ips-dev-envoy-filter 3y345d
dmitriev-aal@VDI-Dmitriev-A:~$ kubectl --context devstbl -n isys-ips-dev get authorizationpolicy -o yaml
apiVersion: v1
items:
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2024-02-21T13:22:58Z"
generation: 10
labels:
app: approval-workflow
name: base-psvc-approval-workflow
namespace: isys-ips-dev
resourceVersion: "18180811957"
uid: f31e1f3c-c030-42fa-86b7-5d923b1f6236
spec:
rules:
- to:
- operation:
methods:
- POST
- PATCH
paths:
- /api/v1/process/start/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- awf_start_process
- to:
- operation:
methods:
- POST
paths:
- /api/v1/user-task/complete
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- awf_complete_process
- to:
- operation:
methods:
- POST
paths:
- /api/v1/user-task/register
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- awf_approve
- to:
- operation:
methods:
- GET
paths:
- /api/v1/requests/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- awf_read_requests
- to:
- operation:
paths:
- /api/camunda/*
- to:
- operation:
paths:
- /api/engine-rest
- to:
- operation:
paths:
- /api/engine-rest/*
- to:
- operation:
paths:
- /api/v1/cache-view
- to:
- operation:
paths:
- /api/v1/cache-view/json
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: approval-workflow
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2024-04-17T09:29:17Z"
generation: 1
labels:
app: cdm-recommendation-service
name: base-psvc-cdm-recommendation-service
namespace: isys-ips-dev
resourceVersion: "12675068705"
uid: 2d1f33b5-e006-4c67-943e-2b9fd443383d
spec:
rules:
- to:
- operation:
paths:
- /api/v1/cache-view
- to:
- operation:
paths:
- /api/v1/cache-view/json
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: cdm-recommendation-service
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2024-06-25T10:44:32Z"
generation: 3
labels:
app: document-factory-service
name: base-psvc-document-factory-service
namespace: isys-ips-dev
resourceVersion: "18436860850"
uid: f33fdaa4-8469-483d-b40d-4bff34d09a4a
spec:
rules:
- to:
- operation:
methods:
- GET
paths:
- /api/v1/s3/reload-templates
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- document_factory_s3_reload-templates
- to:
- operation:
paths:
- /api/v1/health
- to:
- operation:
paths:
- /api/v1/health/*
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: document-factory-service
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2025-09-26T12:15:34Z"
generation: 1
labels:
app: document-factory-templates
name: base-psvc-document-factory-templates
namespace: isys-ips-dev
resourceVersion: "20920811973"
uid: 69473662-67b1-42b1-b7b3-cf65359b3100
spec:
rules:
- to:
- operation:
methods:
- GET
paths:
- /api/v1/template/systems
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- document_factory_templates_upload
- to:
- operation:
methods:
- GET
paths:
- /api/v1/template/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- document_factory_templates_upload
- to:
- operation:
methods:
- POST
paths:
- /api/v1/document/download
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- document_factory_templates_upload
- to:
- operation:
methods:
- GET
paths:
- /api/v1/template/download
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- document_factory_templates_upload
- to:
- operation:
paths:
- /api/v1/template/upload
- to:
- operation:
paths:
- /api/v1/health
- to:
- operation:
paths:
- /api/v1/health/*
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: document-factory-templates
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2024-12-27T13:13:07Z"
generation: 7
labels:
app: idp
name: base-psvc-idp
namespace: isys-ips-dev
resourceVersion: "17813476705"
uid: c314f287-9831-4943-a7f4-0cfc0bb59f08
spec:
rules:
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- to:
- operation:
paths:
- /api/v1/idp
- to:
- operation:
paths:
- /api/v1/idp/view-all
- to:
- operation:
paths:
- /api/v1/idp/view/*
- to:
- operation:
paths:
- /api/v1/idp-task/view-all/*
- to:
- operation:
paths:
- /api/v1/idp-activity/view-all/*
- to:
- operation:
paths:
- /api/v1/idp/download/*
- to:
- operation:
paths:
- /api/v1/idp/user-idp-dates/*
- to:
- operation:
paths:
- /api/v1/idp-user
- to:
- operation:
paths:
- /api/v1/idp-user/view-all
- to:
- operation:
paths:
- /api/v1/idp-user/view/*
- to:
- operation:
paths:
- /api/v1/idp-user/delegates
- to:
- operation:
paths:
- /api/v1/idp-user/delegates/*
- to:
- operation:
paths:
- /api/v1/idp-task
- to:
- operation:
paths:
- /api/v1/idp-task/*
- to:
- operation:
paths:
- /api/v1/idp-activity
- to:
- operation:
paths:
- /api/v1/idp-activity/*
- to:
- operation:
paths:
- /api/v1/idp-template
- to:
- operation:
paths:
- /api/v1/idp-template/view-all
- to:
- operation:
paths:
- /api/v1/idp-template/*
- to:
- operation:
paths:
- /api/v1/idp-template/view/*
- to:
- operation:
paths:
- /api/v1/idp-template-task
- to:
- operation:
paths:
- /api/v1/idp-template-task/*
- to:
- operation:
paths:
- /api/v1/idp-template-task/view-all/*
- to:
- operation:
paths:
- /api/v1/idp-department/get
- to:
- operation:
paths:
- /api/v1/idp-goal/get
- to:
- operation:
paths:
- /api/v1/idp-skill/get
- to:
- operation:
paths:
- /api/v1/idp-task-type/get
- to:
- operation:
methods:
- POST
paths:
- /api/v1/idp-department
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_create_dict
- to:
- operation:
methods:
- PUT
paths:
- /api/v1/idp-department
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_update_dict
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/idp-department/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_delete_dict
- to:
- operation:
methods:
- POST
paths:
- /api/v1/idp-goal
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_create_dict
- to:
- operation:
methods:
- PUT
paths:
- /api/v1/idp-goal
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_update_dict
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/idp-goal/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_delete_dict
- to:
- operation:
methods:
- POST
paths:
- /api/v1/idp-skill
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_create_dict
- to:
- operation:
methods:
- PUT
paths:
- /api/v1/idp-skill
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_update_dict
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/idp-skill/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_delete_dict
- to:
- operation:
methods:
- POST
paths:
- /api/v1/idp-task-type
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_create_dict
- to:
- operation:
methods:
- PUT
paths:
- /api/v1/idp-task-type
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_update_dict
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/idp-task-type/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_idp_delete_dict
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: idp
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2026-03-19T12:50:10Z"
generation: 5
labels:
app: ips-external-dictionaries
name: base-psvc-ips-external-dictionaries
namespace: isys-ips-dev
resourceVersion: "25062032446"
uid: 54a1a003-08c6-4957-b890-b8bf9e637ae5
spec:
rules:
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_EMITENTS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_emitents_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_CURRENCIES/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_currencies_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_INSTRUMENTS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_instruments_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_FINTOOLS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_fintools_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_COUPONS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_coupons_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_OFFERS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_offers_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_AMORTIZATIONS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_amortizations_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_COMPANY_RATING_HISTORY/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_company_rating_history_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/RUDATA_FINTOOL_RATING_HISTORY/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_rudata_fintool_rating_history_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/CBR_CURRENCIES/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_cbr_currencies_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/NRD_M2M_PARTICIPANTS/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_nrd_m2m_participants_view
- to:
- operation:
methods:
- GET
- POST
paths:
- /api/v1/DIASOFT_SECURITIES_IN_CUSTODY/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_dictionary_diasoft_securities_in_custody_view
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: ips-external-dictionaries
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2026-04-03T09:55:03Z"
generation: 2
labels:
app: ips-file-wire
name: base-psvc-ips-file-wire
namespace: isys-ips-dev
resourceVersion: "23766091671"
uid: f779a976-718a-40a8-832c-336fb4084784
spec:
rules:
- to:
- operation:
methods:
- POST
paths:
- /api/v1/register
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_file_wire_register
- to:
- operation:
paths:
- /api/v1/download/*
- to:
- operation:
paths:
- /api/v1/health
- to:
- operation:
paths:
- /api/v1/health/*
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: ips-file-wire
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2026-01-20T08:29:52Z"
generation: 4
labels:
app: ips-notifications
name: base-psvc-ips-notifications
namespace: isys-ips-dev
resourceVersion: "24097256695"
uid: a03e526a-0e04-4a00-9822-d0c8a25c8b02
spec:
rules:
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- to:
- operation:
methods:
- GET
paths:
- /api/v1/ntf-template/view/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/ntf-template/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- PUT
- POST
paths:
- /api/v1/ntf-template
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/ntf-template/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- POST
paths:
- /api/v1/ntf-template/import
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v1/ntf-template/export/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/ntf-event/view/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/ntf-event/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- PUT
- POST
paths:
- /api/v1/ntf-event
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/ntf-event/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v1/SYSTEM_NAME/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/CHANNEL/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/NTF_TYPE/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/TEMPLATE_TYPE/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: ips-notifications
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2023-04-24T13:32:12Z"
generation: 25
labels:
app: mdm
name: base-psvc-mdm
namespace: isys-ips-dev
resourceVersion: "24234948827"
uid: 735995e9-ffe2-4a98-b1ef-921f420a2201
spec:
rules:
- to:
- operation:
paths:
- /api/v2/dictionaries
- to:
- operation:
paths:
- /api/v2/COMMON/json-schema
- to:
- operation:
paths:
- /api/v2/CURRENCIES/json-schema
- to:
- operation:
paths:
- /api/v2/TRADE_INSTRUMENTS/json-schema
- to:
- operation:
paths:
- /api/v2/MAKS_CURRENCIES/json-schema
- to:
- operation:
paths:
- /api/v2/MAKS_INDEXES/json-schema
- to:
- operation:
paths:
- /api/v2/MAKS_PERIODS/json-schema
- to:
- operation:
paths:
- /api/v2/SCHEDULER_TASKS/json-schema
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/CURRENCIES/upload/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_upload
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/download/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_download
- to:
- operation:
methods:
- GET
paths:
- /api/v2/TRADE_INSTRUMENTS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/TRADE_INSTRUMENTS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/TRADE_INSTRUMENTS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_create
- to:
- operation:
methods:
- DELETE
paths:
- /api/v2/TRADE_INSTRUMENTS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_delete
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/MAKS_CURRENCIES/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/MAKS_INDEXES/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/MAKS_PERIODS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/SCHEDULER_TASKS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_scheduler_tasks_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/SCHEDULER_TASKS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_scheduler_tasks_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/SCHEDULER_TASKS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_scheduler_tasks_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/WORKING_DAYS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/WORKING_DAYS/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/WORKING_DAYS/download/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/WORKING_DAYS/upload/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/AWF_REQUEST_TYPES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_awf_types_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/AWF_REQUEST_TYPES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_awf_types_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/AWF_REQUEST_TYPES/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_awf_types_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/download/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/download-with-lock/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/LEGAL_ENTITIES/upload/csv-async
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_edit
- to:
- operation:
methods:
- POST
paths:
- /api/v2/LEGAL_ENTITIES/upload/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
paths:
- /api/ws-dictionaries/*
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: mdm
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2023-10-17T07:48:40Z"
generation: 7
labels:
app: notification-service
name: base-psvc-notification-service
namespace: isys-ips-dev
resourceVersion: "18589479034"
uid: a6131984-a0b9-4ffa-ad7d-e1670053b89a
spec:
rules:
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- to:
- operation:
methods:
- GET
paths:
- /api/v1/rule/view/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/rule/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- PUT
- POST
paths:
- /api/v1/rule
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/rule/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v1/event/view/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- GET
paths:
- /api/v1/event/view-all
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_view
- to:
- operation:
methods:
- PUT
- POST
paths:
- /api/v1/event
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- to:
- operation:
methods:
- DELETE
paths:
- /api/v1/event/*
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- ips_notification_edit
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: notification-service
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2025-06-20T07:08:15Z"
generation: 3
labels:
app: orc-gateway
name: base-psvc-orc-gateway
namespace: isys-ips-dev
resourceVersion: "20779521694"
uid: c7ed1921-2bf8-4c66-9597-5b00cd2abfcb
spec:
rules:
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- to:
- operation:
paths:
- /api/v1/start-process
- to:
- operation:
paths:
- /api/v1/start-process-json
- to:
- operation:
paths:
- /api/v1/cancel-process
- to:
- operation:
paths:
- /api/v1/update-process/*
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: orc-gateway
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2026-04-13T11:35:57Z"
generation: 2
labels:
app: orc-http-adapter
name: base-psvc-orc-http-adapter
namespace: isys-ips-dev
resourceVersion: "25244314327"
uid: 8d2177a2-5fa8-45d0-98ad-89a9d062f1ae
spec:
rules:
- to:
- operation:
paths:
- /api/v1/health
- to:
- operation:
paths:
- /api/v1/health/*
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- to:
- operation:
paths:
- /api/v1/async/response
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: orc-http-adapter
- apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
creationTimestamp: "2026-05-22T13:50:52Z"
generation: 4
labels:
app: rdm
name: base-psvc-rdm
namespace: isys-ips-dev
resourceVersion: "25366063616"
uid: 751b3b05-7823-44e9-826e-10080acc0012
spec:
rules:
- to:
- operation:
paths:
- /api/v2/dictionaries
- to:
- operation:
paths:
- /api/v2/COMMON/json-schema
- to:
- operation:
paths:
- /api/v2/CURRENCIES/json-schema
- to:
- operation:
paths:
- /api/v2/TRADE_INSTRUMENTS/json-schema
- to:
- operation:
paths:
- /api/v2/MAKS_CURRENCIES/json-schema
- to:
- operation:
paths:
- /api/v2/MAKS_INDEXES/json-schema
- to:
- operation:
paths:
- /api/v2/MAKS_PERIODS/json-schema
- to:
- operation:
paths:
- /api/v2/SCHEDULER_TASKS/json-schema
- to:
- operation:
paths:
- /api/v2/IPO_INSTRUMENTS/json-schema
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/CURRENCIES/upload/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_upload
- to:
- operation:
methods:
- GET
paths:
- /api/v2/CURRENCIES/download/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_currencies_download
- to:
- operation:
methods:
- GET
paths:
- /api/v2/TRADE_INSTRUMENTS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/TRADE_INSTRUMENTS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/TRADE_INSTRUMENTS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_create
- to:
- operation:
methods:
- DELETE
paths:
- /api/v2/TRADE_INSTRUMENTS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_trade_instruments_delete
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_CURRENCIES/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/MAKS_CURRENCIES/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_currencies_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_INDEXES/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/MAKS_INDEXES/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_indexes_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/MAKS_PERIODS/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/MAKS_PERIODS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_maks_periods_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/SCHEDULER_TASKS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_scheduler_tasks_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/SCHEDULER_TASKS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_scheduler_tasks_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/SCHEDULER_TASKS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_scheduler_tasks_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/WORKING_DAYS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/WORKING_DAYS/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/WORKING_DAYS/download/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/WORKING_DAYS/upload/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_working_days_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/download/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/download-with-lock/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- POST
paths:
- /api/v2/LEGAL_ENTITIES/upload/csv-async
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_edit
- to:
- operation:
methods:
- POST
paths:
- /api/v2/LEGAL_ENTITIES/upload/csv
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_edit
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/LEGAL_ENTITIES/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- mdm_legal_entities_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/IPO_INSTRUMENTS/active/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- rdm_ipo_instruments_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/IPO_INSTRUMENTS/archive/view
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- rdm_ipo_instruments_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/IPO_INSTRUMENTS/active/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- rdm_ipo_instruments_view
- to:
- operation:
methods:
- GET
paths:
- /api/v2/IPO_INSTRUMENTS/archive/unique-values
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- rdm_ipo_instruments_view
- to:
- operation:
methods:
- POST
- PATCH
- DELETE
paths:
- /api/v2/IPO_INSTRUMENTS/write
when:
- key: request.auth.claims[resource_access][isys-ips-dev-client][roles]
values:
- rdm_ipo_instruments_edit
- to:
- operation:
paths:
- /api/ws-dictionaries/*
- to:
- operation:
paths:
- /api
- to:
- operation:
paths:
- /api/doc
- to:
- operation:
paths:
- /api/swagger-ui/*
- to:
- operation:
paths:
- /api/swagger-config/*
- to:
- operation:
paths:
- /api/swagger-config
- from:
- source:
namespaces:
- monitoring
- from:
- source:
namespaces:
- platform
to:
- operation:
paths:
- /api
- /api/doc
- /metrics
- /health/*
- /info
- /loggers
- /loggers/*
selector:
matchLabels:
app: rdm
kind: List
metadata:
resourceVersion: ""
dmitriev-aal@VDI-Dmitriev-A:~$
