Istio
Medium
Security
What does setting presence: REQUIRED on a jwtRules entry of an Istio RequestAuthentication do?
Select your answer:
Show answer and explanation
Answer: Requests without that rule's token get a 401, even if another rule's token is valid
Explanation
The presence field, added in Istio 1.32, defaults to OPTIONAL, where a missing token is allowed as long as no invalid token is present. With REQUIRED, the token must be present and valid or the request is rejected with 401 Unauthorized. Marking every rule REQUIRED enforces that all configured tokens arrive together.
More medium Istio questions
- Which Istio 1.32 mesh config setting turns off the sidecar's default retry of inbound requests that were reset before reaching the application?
- After enabling ENABLE_GATEWAY_API_HTTPROUTE_AUTH on istiod, an EnvoyFilter that patches the gateway filter envoy.filters.http.rbac no longer affects ALLOW policies. Why?
- What is the purpose of Istio's AuthorizationPolicy resource?
- Which of the following is NOT a traffic management feature of Istio?
- What is a 'subset' in Istio's DestinationRule?
- How does Istio implement mutual TLS (mTLS) between services?