on: &#34;security.istio.io/v1beta1&#34;
kind: &#34;AuthorizationPolicy&#34;
metadata:
  name: allow-ns-not-foo
spec:
  action: ALLOW
  rules:
  - from:
    - source:
        notNamespaces: [&#34;foo&#34;]
</code></pre><p>A <strong>plain text request</strong> from the namespace <code>foo</code> will actually be allowed. The mTLS-only field <code>notNamespaces</code> will be
compared to an empty value when mTLS is not used, resulting in a policy that allows the <strong>plain text request</strong> even if
the 