es the
HTTP-only fields in an invalid DENY rule. This is different from an invalid ALLOW rule,
which causes Istio to ignore the entire rule. The final result is that only the <code>ports</code>
field is used by Istio and the requests are denied because they match with the <code>ports</code>:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl exec &#34;$(kubectl get pod -l app=sleep -n foo -o jsonpath={.items..metadata.name})&#34; -c sleep -n foo -- sh -c &#39;echo &#34;port 90