 service istio-ingressgateway -o jsonpath=&#39;{.status.loadBalancer.ingress[0].ip}&#39;)
</code></pre><p>And run a test query</p><pre><code class=language-bash data-expandlinks=true>$ curl $INGRESS_HOST/headers -s -o /dev/null -w &#34;%{http_code}\n&#34;
200
</code></pre><p>Now, add a policy that requires end-user JWT for <code>httpbin.foo</code>. The next command assumes there is no service-specific policy for <code>httpbin.foo</code> (which should
be the case if you run <a href=#cleanup-part-2>cleanup</a