#34;default&#34;
  namespace: &#34;foo&#34;
spec:
  host: &#34;*.foo.svc.cluster.local&#34;
  trafficPolicy:
    tls:
      mode: ISTIO_MUTUAL
EOF
</code></pre><div><aside class="callout tip"><div class=type><svg class="large-icon"><use xlink:href="/v1.2/img/icons.svg#callout-tip"/></svg></div><div class=content>Host <code>*.foo.svc.cluster.local</code> limits the matches to services in <code>foo</code> namespace only.</div></aside></div><p>As these policy and destination rule are applied on services in nam