I am trying to setup the Istio Authorization Policy at Namespace level in my EKS cluster. I have wriiten the Authorization deny Policy for particaular namespace(murali namespace).
Then i am trying to run the curl from a different(default) namespace to the murali namespace application. But even i used deny policy, CURL is working. It is not showing the RBAC access denied.
apiVersion: security.istio.io/v1beta1 kind: AuthorizationPolicy metadata: name: httpbin namespace: murali spec: action: DENY rules: - from: - source: namespaces: ["default"]
curl -kv --header ‘Host: muralidhara.com’ http://a94aeb8c95d444f7d90a4e6ea3bd9e01-912703673.us-east-2.elb.amazonaws.com/productpage
Is it an issue from istio side or anything i did a mistake from my end? I need someone to help to resolve the issue.