istio

1
apiVersion: security.istio.io/v1beta1
2
kind: AuthorizationPolicy
3
metadata:
4
  name: httpbin-1
5
  namespace: foo
6
  annotations:
7
    "istio.io/dry-run": "true"
8
spec:
9
  selector:
10
    matchLabels:
11
      app: httpbin
12
      version: v1
13
  action: ALLOW
14
  rules:
15
    - to:
16
        - operation:
17
            paths: ["/allow"]
18
---
19
apiVersion: security.istio.io/v1beta1
20
kind: AuthorizationPolicy
21
metadata:
22
  name: httpbin-2
23
  namespace: foo
24
  annotations:
25
    "istio.io/dry-run": "false"
26
spec:
27
  selector:
28
    matchLabels:
29
      app: httpbin
30
      version: v1
31
  action: ALLOW
32
  rules:
33
    - to:
34
        - operation:
35
            paths: ["/another"]
36