istio

1
apiVersion: security.istio.io/v1beta1
2
kind: AuthorizationPolicy
3
metadata:
4
  name: httpbin
5
  namespace: foo
6
spec:
7
  selector:
8
    matchLabels:
9
      app: httpbin
10
      version: v1
11
  rules:
12
    - from:
13
        - source:
14
            principals: ["cluster.local/ns/rule[0]/sa/from[0]-principal[0]"]
15
        - source:
16
            principals: ["some-td/ns/rule[0]/sa/from[1]-principal[0]", "cluster.local/ns/rule[0]/sa/from[1]-principal[1]"]
17
            namespaces: ["rule[0]-from[1]-ns[0]"]