 mode</a>
on the workloads before using any mTLS-only fields in the authorization policy on the same workload.</p><p>If you are unable to enable mTLS with STRICT mode for the workload, the alternative solution is to update the authorization
policy to explicitly allow traffic with non-empty namespaces or reject traffic with empty namespaces (<code>*</code> implies non-empty and <code>not *</code> implies empty).
As namespace can only be extracted when mTLS is STRICT. The policies below effectively also rejec