ls: [&quot;cluster.local/ns/default/sa/sleep&quot;]
   - source:
       namespaces: [&quot;test&quot;]
   to:
   - operation:
       methods: [&quot;GET&quot;]
       paths: [&quot;/info*&quot;]
   - operation:
       methods: [&quot;POST&quot;]
       paths: [&quot;/data&quot;]
   when:
   - key: request.auth.claims[iss]
     values: [&quot;https://accounts.google.com&quot;]
</code></pre><p>The following is another example that sets <code>action</code> to &ldquo;DENY&rdquo; to create a deny policy.
It deni