4;X-Forwarded-Client-Cert&#34;: &#34;By=spiffe://cluster.local/ns/foo/sa/httpbin;Hash=e5178ee79066bfbafb1d98044fcd0cf80db76be8714c7a4b630c7922df520bf2;Subject=\&#34;\&#34;;URI=spiffe://cluster.local/ns/foo/sa/sleep&#34;
  }
}
</code></pre></li><li><p>Verify a request to path <code>/ip</code> is allowed and does not trigger the external authorization:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl exec &#34;$(kubectl get pod -l app=sleep -n foo -o jsonpath={.items..metadata