1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
--- apiVersion: api.cerbos.dev/v1 resourcePolicy: resource: example version: default rules: - actions: - view effect: EFFECT_ALLOW roles: - user condition: match: expr: request.principal.attr.ip.inIPAddrRange("10.20.0.0/16") output: when: ruleActivated: R