/p></li><li><p>根据经过验证的 JWT 声明将虚拟服务更新到路由：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
  name: httpbin
  namespace: foo
spec:
  hosts:
  - &#34;*&#34;
  gateways:
  - httpbin-gateway
  http:
  - match:
    - uri:
        prefix: /headers
      headers:
        &#34;@request.auth.claims.groups&#34;:
          exact: group1
    route:
    - destin