# istio_deny-empty-rule-in.yaml
apiVersion: security.istio.io/v1
kind: AuthorizationPolicy
metadata:
  name: deny-all
  namespace: foo
spec:
  action: DENY
  selector:
    matchLabels:
      app: httpbin
      version: v1
  rules:
  - {}