apiVersion: security.istio.io/v1
kind: AuthorizationPolicy
metadata:
  name: znc
  namespace: irc
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: znc
  action: ALLOW
  rules:
    - from:
        - source:
            principals:
              - cluster.local/ns/irc/sa/thelounge