gateway-api/config/mesh/crd/experimental/gcpauthzpolicy.yaml [137:224]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                          items:
                            description: |-
                              GCPAuthzPolicySource specifies the source identities of a request.
                              Fields in the AuthzPolicySource are ANDed together.
                            properties:
                              principals:
                                description: |-
                                  Principals includes the list of peer identities derived from the peer certificate.
                                  The peer identity is in the format of `"<TRUST_DOMAIN>/ns/<NAMESPACE>/sa/<SERVICE_ACCOUNT>"`,
                                  for example, `"{projectid}.svc.id.goog/ns/foo/sa/productpage"`.
                                  This field requires mTLS enabled.
                                  Limited to 10 entries.
                                items:
                                  description: StringMatchCriteria defines the match
                                    criteria for a string.
                                  properties:
                                    ignoreCase:
                                      description: IgnoreCase is true then the matching
                                        should be case insensitive.
                                      type: boolean
                                    type:
                                      description: Type is the type of the string
                                        match criteria.
                                      enum:
                                      - Exact
                                      - Prefix
                                      - Suffix
                                      - Contains
                                      type: string
                                    value:
                                      description: Value is the match.
                                      type: string
                                  required:
                                  - type
                                  - value
                                  type: object
                                maxItems: 10
                                type: array
                              resources:
                                description: |-
                                  Resources describes the properties of a client VM
                                  resource accessing the internal application load balancers.
                                items:
                                  description: |-
                                    Resource defines the Andromeda credentials.
                                    It is only applicable internal L7 LBs.
                                  properties:
                                    iamServiceAccount:
                                      description: |-
                                        IAMServiceAccount to match against the GCP IAM service account
                                        associated with the source VM of a request.
                                      properties:
                                        ignoreCase:
                                          description: IgnoreCase is true then the
                                            matching should be case insensitive.
                                          type: boolean
                                        type:
                                          description: Type is the type of the string
                                            match criteria.
                                          enum:
                                          - Exact
                                          - Prefix
                                          - Suffix
                                          - Contains
                                          type: string
                                        value:
                                          description: Value is the match.
                                          type: string
                                      required:
                                      - type
                                      - value
                                      type: object
                                    tagValueIdSet:
                                      description: |-
                                        TagValueIDSet is a list of resource tag value permanent IDs to match against
                                        the resource manager tag values associated with the source VM of a request.
                                        All IDs must match.
                                      items:
                                        format: int64
                                        type: integer
                                      maxItems: 10
                                      minItems: 1
                                      type: array
                                  type: object
                                maxItems: 10
                                type: array
                            type: object
                          type: array
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



gateway-api/config/mesh/crd/experimental/gcpauthzpolicy.yaml [227:314]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                          items:
                            description: |-
                              GCPAuthzPolicySource specifies the source identities of a request.
                              Fields in the AuthzPolicySource are ANDed together.
                            properties:
                              principals:
                                description: |-
                                  Principals includes the list of peer identities derived from the peer certificate.
                                  The peer identity is in the format of `"<TRUST_DOMAIN>/ns/<NAMESPACE>/sa/<SERVICE_ACCOUNT>"`,
                                  for example, `"{projectid}.svc.id.goog/ns/foo/sa/productpage"`.
                                  This field requires mTLS enabled.
                                  Limited to 10 entries.
                                items:
                                  description: StringMatchCriteria defines the match
                                    criteria for a string.
                                  properties:
                                    ignoreCase:
                                      description: IgnoreCase is true then the matching
                                        should be case insensitive.
                                      type: boolean
                                    type:
                                      description: Type is the type of the string
                                        match criteria.
                                      enum:
                                      - Exact
                                      - Prefix
                                      - Suffix
                                      - Contains
                                      type: string
                                    value:
                                      description: Value is the match.
                                      type: string
                                  required:
                                  - type
                                  - value
                                  type: object
                                maxItems: 10
                                type: array
                              resources:
                                description: |-
                                  Resources describes the properties of a client VM
                                  resource accessing the internal application load balancers.
                                items:
                                  description: |-
                                    Resource defines the Andromeda credentials.
                                    It is only applicable internal L7 LBs.
                                  properties:
                                    iamServiceAccount:
                                      description: |-
                                        IAMServiceAccount to match against the GCP IAM service account
                                        associated with the source VM of a request.
                                      properties:
                                        ignoreCase:
                                          description: IgnoreCase is true then the
                                            matching should be case insensitive.
                                          type: boolean
                                        type:
                                          description: Type is the type of the string
                                            match criteria.
                                          enum:
                                          - Exact
                                          - Prefix
                                          - Suffix
                                          - Contains
                                          type: string
                                        value:
                                          description: Value is the match.
                                          type: string
                                      required:
                                      - type
                                      - value
                                      type: object
                                    tagValueIdSet:
                                      description: |-
                                        TagValueIDSet is a list of resource tag value permanent IDs to match against
                                        the resource manager tag values associated with the source VM of a request.
                                        All IDs must match.
                                      items:
                                        format: int64
                                        type: integer
                                      maxItems: 10
                                      minItems: 1
                                      type: array
                                  type: object
                                maxItems: 10
                                type: array
                            type: object
                          type: array
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



