ss=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: v1
kind: ConfigMap
metadata:
  name: opa-policy
  namespace: opa
data:
  policy.rego: |
    package mypackage.mysubpackage

    import rego.v1

    request_headers := input.attributes.request.http.headers

    force_unauthenticated if request_headers[&#34;x-force-unauthenticated&#34;] == &#34;enabled&#34;

    default allow := false

    allow if {
      not force_unauthenticated
      request_headers[&#34;x-