blob: d8cf3ef9a4cf3b48dd91013d05fbe776063498c9 [file] [log] [blame]
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: httpbin
namespace: foo
spec:
selector:
matchLabels:
app: httpbin
version: v1
rules:
- from:
- source:
namespaces: ["dubbo-system"]
when:
- key: "source.principal"
values: ["*", "*/ns/foo/sa/all-td", "*-td/ns/foo/sa/prefix-td"]