Skip to content

Authorization rules

An AuthorizationPolicy main element is the authorization rules defined in authorizations.

Every authorization rule must contain a CEL expression. It is expected to return a Response describing the decision made by the rule (or nothing if no decision is made).

Creating the Response can be a tedious task, you need to remember the different types names and format.

The CEL engine used to evaluate the authorization rules has been extended with a library to make the creation of Response easier. Browse the available libraries documentation for details.

Authorization rules

TODO