Deny "Accessing External Services" for dedicated namespace

Networking
1

I used meshConfig.outboundTrafficPolicy.mode = ALLOW_ANY during the installation. Now, however, I have the requirements that a special namespace should * not * have access to external services. Do you have a tip on how I can configure this most effectively for one namespace?

thanks for the help

istio version 1.4

2

Set https://istio.io/latest/docs/reference/config/networking/sidecar/#OutboundTrafficPolicy to REGISTRY_ONLY for that specific namespace.

3

Thank you very much, I had not noticed this specs at the Sidecar Resource, nice solution!

1 Like