 the workload with:</p><ul><li>&ldquo;GET&rdquo; method at paths of prefix &ldquo;/info&rdquo; or,</li><li>&ldquo;POST&rdquo; method at path &ldquo;/data&rdquo;.</li></ul><p>when the request has a valid JWT token issued by &ldquo;https://accounts.google.com&rdquo;.</p><p>Any other requests will be denied.</p><pre><code class=language-yaml>apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
 name: httpbin
 namespace: foo
spec:
 action: ALLOW
 rules:
 - from:
   - source:
       principa