ingressgateway-jwt-policy.yaml

apiVersion: authentication.istio.io/v1alpha1
kind: Policy
metadata:
  name: ingressgateway
  namespace: istio-system
spec:
  targets:
  - name: istio-ingressgateway
  peers:
  - mtls: {}
  origins:
  - jwt:
      audiences:
      - "https://api.demo.com/"
      issuer: "https://demo.auth0.com/"
      jwksUri: "https://demo.auth0.com/.well-known/jwks.json"
  principalBinding: USE_ORIGIN