tests/integration/telemetry/stackdriver/testdata/security_authz_dry_run/policy_deny.yaml.tmpl

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  namespace: "{{ .Namespace }}"
  name: "dry-run-deny"
  annotations:
    "istio.io/dry-run": "true"
spec:
  action: DENY
  rules:
  - when:
    - key: request.headers[Dry-Run-Deny]
      values: ["matched"]