pace&rdquo; and
an optional &ldquo;selector&rdquo;.</p><ul><li>&ldquo;metadata/namespace&rdquo; tells which namespace the policy applies. If set to root
namespace, the policy applies to all namespaces in a mesh.</li><li>workload &ldquo;selector&rdquo; can be used to further restrict where a policy applies.</li></ul><p>For example,</p><p>The following authorization policy applies to workloads containing label
&ldquo;app: httpbin&rdquo; in namespace bar.</p><pre><code class=language-yaml>apiVersion: security.