Auth policy - deny all is allowing traffic?

Networking
1

I am using the sample deny-all policy from Istio / Authorization Policy

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
 name: deny-all
 namespace: mynamespace
spec:
  {}

but when i exec into a pod in mynamespace, curl https://www.google.com still works

my environment is istio 1.8.2 i seem to recall this deny-all policy used to work in older versions of istio.

2

Hi
I believe authorization that you have used does not apply to outgoing traffic
it only blocks incoming traffic.