How can we restrict internal requests to a service in Istio?

12/19/2019

For example I have got a Service called Data. That selects a data pod which basically returns "Hello-World".

But I have also got three more Services that connects to Data Service to get that "Hello-World"

  1. ServiceOne
  2. ServiceTwo
  3. ServiceThree

Now the question is: is there any way I can restrict ServiceThree to access Data Service?

Well I tried using http.match.sourceLabels in VirtualService but that does not restrict.

One thing that worked for me is Simple Denials in Istio, but that's not what I wanted. You can find information about it on : https://istio.io/docs/tasks/policy-enforcement/denial-and-list/

I am basically looking for a way where you add some configuration in your VirtualService which allows only certain Services to access the host service?

-- Arslan Ghous
istio
kubernetes

0 Answers