rsion: security.istio.io/v1
kind: AuthorizationPolicy
metadata:
  name: deny-method-get
  namespace: foo
spec:
  selector:
    matchLabels:
      app: httpbin
  action: DENY
  rules:
  - to:
    - operation:
        methods: [&#34;GET&#34;]
    when:
    - key: request.headers[x-token]
      notValues: [&#34;admin&#34;]
EOF</code></pre></li><li><p>Verify that <code>GET</code> requests with the HTTP header <code>x-token: admin</code> are allowed:</p><pre><code class=language-bash data-expandlinks=true data-r