RBAC does not support multiple methods

[bdecoste]

A single (or no) methods value in the rbac permissions behaves correctly but when multiple methods are defined. Doc indicates:

methods | []string | What http methods (GET, POST, …) are allowed.

      rbac:
        policies:
          viewer:
            permissions:
              methods:
              - GET
              - POST
              pathPrefix: /jwt-pets
            principals:
            - jwtPrincipal:
                claims:
                  email: service-account-gloo@placeholder.org
                  sub: 2c44f99f-2988-4c3e-8564-7e130ee34964

$ curl -k -H "Authorization: Bearer ${ACCESS_TOKEN}" $(glooctl proxy url --port https)/jwt-pets
RBAC: access denied