authorizationpolicy_auth.yaml

apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
    name: allow-auth-mongo
spec:
    selector:
      matchLabels:
        app: mongo
    rules:
    - from:
      - source:
          principals:
            ["cluster.local/ns/cloud-lab/sa/usertoken"]
      to:
      - operation:
          ports: ["27017"]