Allow the request if it matches with the rules.

Deny the request if it matches with the rules.

ALL means that the authorization policy will be applied to all workloads in the mesh (any namespace).

NAMESPACE means that the policy will only be applied to workloads in a specific namespace.

WORKLOAD_SELECTOR means that the policy will only be applied to specific workloads that were selected by their labels.

Enum value maps for Action.

Enum value maps for Action.

Enum value maps for Scope.

Enum value maps for Scope.