fo-reviews</code> ServiceAccount 去访问 <code>ratings</code> 工作负载：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: &#34;security.istio.io/v1beta1&#34;
kind: &#34;AuthorizationPolicy&#34;
metadata:
  name: &#34;ratings-viewer&#34;
  namespace: default
spec:
  selector:
    matchLabels:
      app: ratings
  rules:
  - from:
    - source:
        principals: [&#34;cluster.local/ns/default/sa/bookinfo-reviews&#34;]
    to:
    - o