ce><a href=#PolicyTargetReference>PolicyTargetReference</a><li role=none aria-label=WorkloadMode><a href=#WorkloadMode>WorkloadMode</a></ol><hr></div></nav><h2 id=WorkloadSelector>WorkloadSelector</h2><section><p>WorkloadSelector specifies the criteria used to determine if a policy can be applied
to a proxy. The matching criteria includes the metadata associated with a proxy,
workload instance info such as labels attached to the pod/VM, or any other info
that the proxy provides to Istio during the initial h