 ./key.pem --expire 5)
$ for i in `seq 1 10`; do curl --header &#34;Authorization: Bearer $TOKEN&#34; $INGRESS_HOST/headers -s -o /dev/null -w &#34;%{http_code}\n&#34;; sleep 1; done
200
200
200
200
200
401
401
401
401
401
</code></pre><p>You can also add a JWT policy to an ingress gateway (e.g., service <code>istio-ingressgateway.istio-system.svc.cluster.local</code>).
This is often used to define a JWT policy for all services bound to the gateway, instead of for individual services.</p><h3 id=end-user-aut