horization policy to dry-run mode:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl annotate --overwrite authorizationpolicies deny-path-headers -n foo istio.io/dry-run=&#39;true&#39;
</code></pre></li><li><p>Verify a request to path <code>/headers</code> is allowed because the policy is created in dry-run mode, run the following command
to send 20 requests from <code>sleep</code> to <code>httpbin</code>, the request includes the header <code>X-B3-Sampled: 1</code> to always