blob: aa504c6b97d641e444eb51fc13deb9ec1fd5cd4f [file] [log] [blame]
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
namespace: "{{ .Namespace }}"
name: "dry-run-deny"
annotations:
"istio.io/dry-run": "true"
spec:
action: DENY
rules:
- from:
- source:
principals: ["*"]
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
namespace: "{{ .Namespace }}"
name: "dry-run-allow"
annotations:
"istio.io/dry-run": "true"
spec:
action: ALLOW
rules:
- from:
- source:
principals: ["*"]