apiVersion: security.istio.io/v1
kind: AuthorizationPolicy
metadata:
  name: auth-service-web-auth-policy
  namespace: iss
spec:
  action: ALLOW
  rules:
  - from:
    - source:
        principals:
        - cluster.local/ns/iss/sa/*
        - cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account
        - cluster.local/ns/namespace2/sa/sample-service
  selector:
    matchLabels:
      app.kubernetes.io/name: auth-service-web
status:
  conditions:
  - lastTransitionTime: "2025-10-08T15:04:10.396578681Z"
    message: attached to ztunnel
    reason: Accepted
    status: "True"
    type: ZtunnelAccepted

Liveness probe failed: Get "http://10.244.93.49:8080/healthz": read tcp 10.33.211.182:59980->10.244.93.49:8080: read: connection reset by peer 

src.addr=10.33.211.182:40226 dst.addr=10.244.93.49:8080 dst.service="auth-service-web.iss.svc.cluster.local" dst.workload="auth-service-web-8574647b9d-c729j" dst.namespace="iss" direction="inbound" bytes_sent=0 bytes_recv=0 duration="0ms" error="connection closed due to policy rejection: allow policies exist, but none allowed"