source namespace is <code>foo</code>.</p><p>The following is an example DENY policy that uses mTLS-only fields to reject a request if it is from the namespace <code>foo</code>:</p><pre><code class=language-yaml data-expandlinks=true data-repo=istio>apiVersion: &#34;security.istio.io/v1beta1&#34;
kind: &#34;AuthorizationPolicy&#34;
metadata:
  name: reject-ns-foo
spec:
  action: DENY
  rules:
  - from:
    - source:
        namespaces: [&#34;foo&#34;]
</code></pre><p>A <strong>plain text request</strong> fro