Add wait-for-drain to AuthorizationPolicy for system paths used by Knative

[yanniszark]

Expected Behavior

In page https://knative.dev/v0.22-docs/serving/istio-authorization/#allowing-access-from-system-pods-by-paths, the given AuthorizationPolicy gives access to paths /metrics and /healthz. I expected the given AuthorizationPolicy to also include the /wait-for-drain path. Knative uses this path to wait until all requests in the queue are complete before terminating a Pod.

Actual Behavior

The included Authorization policy does not include the /wait-for-drain path.

[csantanapr]

This issue is not specific to mkdocs new site
/remove-kind mkdocs

[csantanapr]

@dprotaso could you triage/handle this?

[snneji]

/priority medium

[abrennan89]

cc @nak3 @houshengbo @markusthoemmes is this something you can maybe help to provide information for?

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen. Mark the issue as
fresh by adding the comment /remove-lifecycle stale.