if using Kubernetes deployment and oathkeeer maester, it'll be two CRD with non-overlapping matching rules on the HTTP path (edited)

@alert-advantage-94977 is it possible without using maester? nice to know it's possible using maester!

Yes it is possible without maester, as maester is just a tool to create access rules via Kubernetes CRDs. From your original question I'm not sure if you want to handle both paths in the same manner or have different configuration. If you want different configuration, you can create two access rule entries with a unique id and url match. On the match.url you then specify the specific url:

- id: api1
  match:
    url: <https://api1.example.com/health>
  ...
- id: api2
  match:
    url: <https://api2.example.com/health>
  ...

Else, if you want to handle both paths in the same manner, you create one entry and use a glob or regex pattern (regex is default):

- id: health
  match:
    url: https://<.*>.example.com/health
  ...

See https://www.ory.sh/docs/oathkeeper/api-access-rules#access-rule-format for more information and example of access rules. Hope this helps!

thank you!