test.yaml

gistfile1.txt

--- 
apiVersion: config.istio.io/v1alpha2
kind: EndUserAuthenticationPolicySpec
metadata: 
  name: cars-api-auth-policy
  namespace: default
spec: 
  jwts: 
    - issuer: http://keycloak:8080/auth/realms/istio
      jwks_uri: http://keycloak:8080/auth/realms/istio/protocol/openid-connect/certs
      audiences: 
      - cars-web     
--- 
apiVersion: config.istio.io/v1alpha2
kind: EndUserAuthenticationPolicySpecBinding
metadata:
  name: cars-api-auth-policy-binding
  namespace: default
spec:
  policies:
    - name: cars-api-auth-policy
      namespace: default
  services:
    - name: cars-api
      namespace: default