Issue with Istio Authorization Policy at Namespace level

Security
1

Hi Team,

I am trying to setup the Istio Authorization Policy at Namespace level in my EKS cluster. I have wriiten the Authorization deny Policy for particaular namespace(murali namespace).
Then i am trying to run the curl from a different(default) namespace to the murali namespace application. But even i used deny policy, CURL is working. It is not showing the RBAC access denied.

	
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: httpbin
  namespace: murali
spec:
  action: DENY
  rules:
  - from:
    - source:
        namespaces: ["default"]

Curl Command:

curl -kv --header ‘Host: muralidhara.com’ http://a94aeb8c95d444f7d90a4e6ea3bd9e01-912703673.us-east-2.elb.amazonaws.com/productpage

Is it an issue from istio side or anything i did a mistake from my end? I need someone to help to resolve the issue.

Thanks
Muralidhara Reddy