Authorization

The Open Policy Agent server that runs as a part of the Istio system has its APIs protected by Basic Authorization.

The system.authz policy in the system's bundle controls which Open Policy Agent APIs are accessible. You can view and modify this policy via the UI under system/authz/authz.rego like you would any other policy.