   discoveryUrl: &lt;discovery-url-from-oidc-provider&gt;
    clientId: &lt;client-id-from-oidc-provider&gt;
    clientSecretRef:
        name: &lt;kubernetes-secret-name&gt;
        key: &lt;kubernetes-secret-key&gt;</code></pre><pre><code class=language-yaml data-expandlinks=true data-repo=istio>apiVersion: &#34;security.cloud.ibm.com/v1&#34;
kind: Policy
metadata:
    name: my-sample-web-policy
    namespace: sample-namespace
spec:
    targets:
    - serviceName: &lt;kubernetes-service-name-to-protect&gt