ation with ingress exception"><a href=#namespace-isolation-with-ingress-exception>Namespace isolation with ingress exception</a><li role=none aria-label="Require mTLS in authorization layer (defense in depth)"><a href=#require-mtls-in-authorization-layer-defense-in-depth>Require mTLS in authorization layer (defense in depth)</a><li role=none aria-label="Require mandatory authorization check with DENY policy"><a href=#require-mandatory-authorization-check-with-deny-policy>Require mandatory authorization chec