p><pre><code>match: destination.labels["app"] == "details" &amp;&amp; source.user == "spiffe://cluster.local/ns/default/sa/bookinfo-productpage"
</code></pre><p>It matches requests coming from the serivce account “<em>spiffe://cluster.local/ns/default/sa/bookinfo-productpage</em>” on the <code>details</code> service.</p><blockquote><p>Note: If you are using a namespace other than <code>default</code>, replace the <code>default</code> with your namespace in the value of <code>source.user</code>.</p></blo