RBAC denied for connection check

1

Hi All:
We are using istio 1.1.7 and I am getting strange rbac denied when checking connection and we did not setup any network filter, actual rbac rule looks passed based on rbac debug logs, does anyone have idea why? Thanks!

filter_metadata {
key: “jwt-auth”
value {
fields {
key: “example.com”
value {
string_value: “{“username”:“dsun”}”
}
}
}
}

[2019-08-29 10:29:38.472][36][debug][rbac] [external/envoy/source/extensions/filters/http/rbac/rbac_filter.cc:104] enforced allowed
[2019-08-29 10:29:38.520][34][debug][rbac] [external/envoy/source/extensions/filters/network/rbac/rbac_filter.cc:36] checking connection: requestedServerName: , remoteAddress: 100.80.65.247:35780, localAddress: 100.80.65.247:8080, ssl: none, dynamicMetadata:
[2019-08-29 10:29:38.520][34][debug][rbac] [external/envoy/source/extensions/filters/network/rbac/rbac_filter.cc:105] enforced denied