blob: 4a81374b424bbd27e36827d0a4cc6b4b87dae297 [file] [log] [blame]
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: httpbin
namespace: foo
spec:
selector:
matchLabels:
app: httpbin
version: v1
rules:
- from:
- source:
principals: ["cluster.local/ns/rule[0]/sa/from[0]-principal[0]"]
- source:
principals: ["some-td/ns/rule[0]/sa/from[1]-principal[0]", "cluster.local/ns/rule[0]/sa/from[1]-principal[1]"]
namespaces: ["rule[0]-from[1]-ns[0]"]