Authorization Policy

Authorization Policy Presets

Ready-to-deploy configuration presets for Authorization Policy. Each preset is a complete manifest you can copy, customize, and deploy.

2 presets
01

Require an Authenticated JWT Principal

The canonical AuthorizationPolicy: allow a request only if it carries a valid JWT identity (`request_principals: ["*"]` matches any issuer/subject). Anonymous requests -- those with no token, or a...

02

Delegate to an External Authorizer (CUSTOM) on the Ingress Gateway

Delegate the authorization decision for sensitive ingress paths to an external authorization service (an OPA sidecar, a custom authz server, an OAuth2 proxy, ...) registered as an extension provider...