deploy-templates/templates/istio-auth-policy.yaml

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: {{ template "geoServer.fullname" . }}-auth-policy
spec:
  action: DENY
  rules:
    - from:
        - source:
            notRequestPrincipals:
              - '*'
      to:
        - operation:
            notPaths:
              - /geoserver
              - /geoserver/*
              - /metrics
  selector:
    matchLabels:
        {{- include "geoServer.labels" . | nindent 8 }}