blob: 68f8c647401c46b09adda9505bd19fdaffa79c34 [file] [log] [blame]
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: policy-audit
namespace: "{{ .Namespace }}"
spec:
selector:
matchLabels:
"app": "{{ .dst }}"
action: AUDIT
rules:
- to:
- operation:
paths: ["/audit"]
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
name: policy-allow
namespace: "{{ .Namespace }}"
spec:
selector:
matchLabels:
"app": "{{ .dst }}"
action: ALLOW
rules:
- to:
- operation:
paths: ["/allow"]
---