For example I have got a Service called Data
. That selects a data pod
which basically returns "Hello-World"
.
But I have also got three more Services that connects to Data Service to get that "Hello-World"
Now the question is: is there any way I can restrict ServiceThree
to access Data
Service?
Well I tried using http.match.sourceLabels
in VirtualService
but that does not restrict.
One thing that worked for me is Simple Denials
in Istio, but that's not what I wanted. You can find information about it on : https://istio.io/docs/tasks/policy-enforcement/denial-and-list/
I am basically looking for a way where you add some configuration in your VirtualService
which allows only certain Services to access the host service?