#34;foo&#34;]
</code></pre><h2 id=namespace-isolation-with-ingress-exception>Namespace isolation with ingress exception</h2><p>The following two policies enable strict mTLS on namespace <code>foo</code>, and allow traffic from the same namespace and also
from the ingress gateway.</p><pre><code class=language-yaml data-expandlinks=true data-repo=istio>apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: default
  namespace: foo
spec:
  mtls:
    mode: STRICT
---
apiVersion: securi