questPrincipal</code> 字段。</p><pre><code class=language-bash data-expandlinks=false data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: require-jwt
  namespace: foo
spec:
  selector:
    matchLabels:
      app: httpbin
  action: ALLOW
  rules:
  - from:
    - source:
       requestPrincipals: [&#34;testing@secure.istio.io/testing@secure.istio.io&#34;]
EOF
</code></pre></li><li><p>获取 <code>iss</code> 和 <code>sub</code> 