Issue with docs/tasks/security/authentication/authn-policy/index.md

[woodliu]

Fellow this step，after create gateway and virtualservice，when I run curl $INGRESS_HOST/headers -s -o /dev/null -w "%{http_code}\n", it can't access the service.

I check the listener of the default istio-ingressgateway, can't find the port 80
istioctl pc listener istio-ingressgateway-54c4985b54-xh6pc.istio-system --port 80

And i check the default istio ingressgateway

# istioctl x describe pod istio-ingressgateway-54c4985b54-xh6pc.istio-system
Pod: istio-ingressgateway-54c4985b54-xh6pc.istio-system
   Pod Ports: 15021 (istio-proxy), 8080 (istio-proxy), 8443 (istio-proxy), 15443 (istio-proxy), 15011 (istio-proxy), 15012 (istio-proxy), 8060 (istio-proxy), 853 (istio-proxy), 15090 (istio-proxy)
Suggestion: add 'version' label to pod for Istio telemetry.
--------------------
Service: istio-ingressgateway.istio-system
   Port: status-port 15021/UnsupportedProtocol targets pod port 15021
   Port: http2 80/HTTP2 targets pod port 8080
   Port: https 443/HTTPS targets pod port 8443
   Port: tls 15443/TLS targets pod port 15443

When access in the ingressgateway pod, do curl, i can get the right response

# curl 127.0.0.1:8080/headers
{
  "headers": {
    "Accept": "*/*",
    "Content-Length": "0",
    "Host": "127.0.0.1:8080",
    "User-Agent": "curl/7.58.0",
    "X-B3-Parentspanid": "44ebde39492dfb0b",
    "X-B3-Sampled": "0",
    "X-B3-Spanid": "168423667dfdecfb",
    "X-B3-Traceid": "851a8f15b235006c44ebde39492dfb0b",
    "X-Envoy-Internal": "true",
    "X-Forwarded-Client-Cert": "By=spiffe://cluster.local/ns/foo/sa/httpbin;Hash=2942fff99b654c09daabec4b25586f1606814ff8a3f1b4584cc795ae3e9afcb4;Subject=\"\";URI=spiffe://cluster.local/ns/istio-system/sa/istio-ingressgateway-service-account"
  }
}

I try to change the port of gateway from 80 to 8999, when use istioctl pc listener command ,i can get this port
Why can't use the 80 port for gateway?

[woodliu]

fixed