/p><pre><code class=language-yaml>apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
 name: ext-authz
 namespace: istio-system
spec:
 selector:
   matchLabels:
     app: istio-ingressgateway
 action: CUSTOM
 provider:
   name: &quot;my-custom-authz&quot;
 rules:
 - to:
   - operation:
       paths: [&quot;/admin/*&quot;]
</code></pre></td></tr></tbody></table></section></article><nav class=pagenav><div class=left></div><div class=right><a title="Describes the supported conditions in a