Say we have a Java application running in a Kubernetes pod (single docker container) that has 'public' endpoints and 'internal' endpoints.
/public endpoints should be accessible from public internet and exposed via the Ingress.
/internal endpoints should only be accessible to other pods in the Kubernetes cluster.
Is there any way we can limit access to these
/internal endpoints in 'vanilla' Kubernetes? One way I guess would to be declare the public endpoints in the ingress but them seems messy.
I also believe tools like Istio allow policy based access?