Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Islamyakin patch 1 #2203

Open
wants to merge 11 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion CNAME
Original file line number Diff line number Diff line change
@@ -1 +1 @@

islamyakin.my.id
16 changes: 8 additions & 8 deletions _config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,13 @@
#

# Name of your site (displayed in the header)
name: Your Name
name: Islam Nurul Yakin

# Short bio or description (displayed in the header)
description: Web Developer from Somewhere
description: DevOps Engineer @ SEVIMA

# URL of your avatar or profile pic (you could use your GitHub profile pic)
avatar: https://raw.githubusercontent.com/barryclark/jekyll-now/master/images/jekyll-logo.png
avatar: https://en.gravatar.com/userimage/197672144/2118b51eb923a104df6199b27de7bc17.jpeg?size=256

#
# Flags below are optional
Expand All @@ -18,15 +18,15 @@ avatar: https://raw.githubusercontent.com/barryclark/jekyll-now/master/images/je
# Includes an icon in the footer for each username you enter
footer-links:
dribbble:
email:
email: [email protected]
facebook:
flickr:
github: barryclark/jekyll-now
github: islamyakin
instagram:
linkedin:
linkedin: islamnurulyakin
pinterest:
rss: # just type anything here for a working RSS icon
twitter: jekyllrb
twitter:
stackoverflow: # your stackoverflow profile, e.g. "users/50476/bart-kiers"
youtube: # channel/<your_long_string> or user/<user-name>
googleplus: # anything in your profile username that comes after plus.google.com/
Expand All @@ -41,7 +41,7 @@ google_analytics:

# Your website URL (e.g. http://barryclark.github.io or http://www.barryclark.co)
# Used for Sitemap.xml and your RSS feed
url:
url: islamyakin.com

# If you're hosting your site at a Project repository on GitHub pages
# (http://yourusername.github.io/repository-name)
Expand Down
10 changes: 0 additions & 10 deletions _posts/2014-3-3-Hello-World.md

This file was deleted.

50 changes: 50 additions & 0 deletions _posts/2023-8-27-rbac-envoy-with-whitelist-ip-address.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
---
layout: post
title: Configure RBAC in Envoyproxy with whitelist Ip Address
---

pada tutorial ini bagaimana caranya membuat RBAC di envoy dengan whitelist IP Address yang ditentukan.
rbac ini berada pada HTTP-HTTP Filters. dengan menambahkan envoy.filters.http.rbac dengan typed config ```type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC```


filter RBAC ini berada di posisi paling atas dibawah HTTP Router.


```bash
name: envoy.filters.http.rbac
typed_config:
"@type": type.googleapis.com/envoy.extensions.filters.http.rbac.v3.RBAC
matcher:
matcher_tree:
input:
name: ip
typed_config:
"@type": type.googleapis.com/envoy.extensions.matching.common_inputs.network.v3.SourceIPInput
custom_match:
name: ip-matcher
typed_config:
"@type": type.googleapis.com/xds.type.matcher.v3.IPMatcher
range_matchers:
- ranges:
- address_prefix: 10.0.0.0
prefix_len: 32
on_match:
action:
name: envoy.filters.http.rbac.action
typed_config:
"@type": type.googleapis.com/envoy.config.rbac.v3.Action
name: internal
action: ALLOW
on_no_match:
action:
name: action
typed_config:
"@type": type.googleapis.com/envoy.config.rbac.v3.Action
name: allow-request
action: DENY
```

config filter RBAC ini bersifat global artinya listener yang ditentukan pasti akan terfilter. filtr ini bisa juga menambahkan lebih dari 1 blok IP Address.

##### _Disclaimer_
_Opinions expressed are solely my own and do not express the views or opinions of my employer._
9 changes: 3 additions & 6 deletions about.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,12 +4,9 @@ title: About
permalink: /about/
---

Some information about you!

### More Information

A place to include any other types of information that you'd like to include about yourself.
DevOps Engineer @ SEVIMA, Very interested in Cloud Native & Cloud Computing, and currently learning Chaos Engineering.

Thank you for your attention.
### Contact me

[email@domain.com](mailto:email@domain.com)
[nurulyakin79@gmail.com](mailto:nurulyakin79@gmail.com)