  app: tcp-echo
  action: DENY
  rules:
  - to:
    - operation:
        methods: [&#34;GET&#34;]
        ports: [&#34;9000&#34;]
EOF
</code></pre></li><li><p>Verify that requests to port 9000 is denied. This occurs because the request matches the <code>ports</code> in the above-mentioned deny policy.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl exec &#34;$(kubectl get pod -l app=sleep -n foo -o jsonpath={.items..metadata.name})&#34; \
    -c sleep -n foo -- sh -c \
    