blob: 5a0ca258cf0d2994572b02cf337ae82847a302eb [file] [log] [blame]
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: httpbin-deny
namespace: foo
spec:
action: ALLOW
rules:
- from:
- source:
requestPrincipals: ["id-1"]
to:
- operation:
methods: ["GET"]
- from:
- source:
namespaces: ["ns-1"]
to:
- operation:
hosts: ["example.com"]