horization for
requests to path <code>/headers</code> using the external authorizer defined by <code>sample-ext-authz-grpc</code>.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -n foo -f - &lt;&lt;EOF
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: ext-authz
spec:
  selector:
    matchLabels:
      app: httpbin
  action: CUSTOM
  provider:
    # The provider name must match the extension provider defined in the mesh config.
    # Yo