deploy-templates/templates/authorizpolicy-ussa.yaml

kind: AuthorizationPolicy
apiVersion: security.istio.io/v1beta1
metadata:
  name: authoriz-policy-{{ .Values.name }}
  namespace: {{ .Release.Namespace }}
spec:
  selector:
    matchLabels:
      app: {{ .Values.name }}
  rules:
    - from:
        - source:
            notRequestPrincipals:
              - '*'
      to:
        - operation:
            notPaths:
              - /actuator*
              - /api/public/data-factory/*
  action: DENY