Authorization

The OPA server is part of the Istio system and has its APIs protected by Basic Authorization.

The system.authz policy in the System's bundle controls which OPA APIs are accessible. You can view and modify policies through the Styra DAS UI in system/authz/authz.rego.