istio

1
apiVersion: security.istio.io/v1beta1
2
kind: AuthorizationPolicy
3
metadata:
4
  name: httpbin
5
  namespace: foo
6
spec:
7
  selector:
8
    matchLabels:
9
      app: httpbin
10
      version: v1
11
  rules:
12
    - from:
13
        - source:
14
            namespaces: ["istio-system"]
15
      when:
16
        - key: "source.principal"
17
          values: ["*", "*/ns/foo/sa/all-td", "*-td/ns/foo/sa/prefix-td"]