istio

1
apiVersion: security.istio.io/v1beta1
2
kind: AuthorizationPolicy
3
metadata:
4
  name: httpbin-deny
5
  namespace: foo
6
spec:
7
  action: ALLOW
8
  rules:
9
    - from:
10
        - source:
11
            requestPrincipals: ["id-1"]
12
      to:
13
        - operation:
14
            methods: ["GET"]
15
    - from:
16
        - source:
17
            namespaces: ["ns-1"]
18
      to:
19
        - operation:
20
            ports: ["8080"]
21
            methods: ["GET"]
22
    - from:
23
        - source:
24
            namespaces: ["ns-2"]
25
            requestPrincipals: ["id-2"]
26
      to:
27
        - operation:
28
            ports: ["9090"]
29
    - from:
30
        - source:
31
            namespaces: ["ns-1"]
32
      to:
33
        - operation:
34
            ports: ["80"]
35