Deny "Accessing External Services" for dedicated namespace

I used meshConfig.outboundTrafficPolicy.mode = ALLOW_ANY during the installation. Now, however, I have the requirements that a special namespace should * not * have access to external services. Do you have a tip on how I can configure this most effectively for one namespace?

thanks for the help

istio version 1.4

Set to REGISTRY_ONLY for that specific namespace.

Thank you very much, I had not noticed this specs at the Sidecar Resource, nice solution!

1 Like