Added Authorization policy scoped to a port

aspenmesh · Sep 9, 2020 · 892c1b1 · 892c1b1
1 parent 0200964
commit 892c1b1
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/section_4/authorization-policy-audience-path-port-deny.yaml b/section_4/authorization-policy-audience-path-port-deny.yaml
@@ -0,0 +1,19 @@
+apiVersion: "security.istio.io/v1beta1"
+kind: "AuthorizationPolicy"
+metadata:
+  name: online-boutique
+  namespace: istio-system
+spec:
+  selector:
+    matchLabels:
+      istio: ingressgateway
+  action: DENY
+  rules:
+  - when:
+    - key: "request.auth.audiences"
+      notValues: ["boutiquestore.com"]
+    to:
+    - operation:
+        paths: ["/cart"]
+        ports: [ "443" ]
+---