apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: allow-dashboard-to-metrics
  namespace: demo
spec:
  selector:
    matchLabels:
      app: metrics-api
  rules:
  - from:
    - source:
        principals:
          - cluster.local/ns/demo/sa/dashboard-sa