kind: NetworkPolicy
apiVersion: networking.k8s.io/v1
metadata:
  name: allow-compositeop
  namespace: calculator 
spec:
  podSelector:
    matchLabels:
      app: compositeop
  ingress:
  - ports:
    - port: 80  
    from:
    - podSelector:
        matchLabels:
          purpose: curl       
    - podSelector:
        matchLabels:
          app: processor
    - namespaceSelector:
        matchLabels:
          purpose: istio-system
    - namespaceSelector:
        matchLabels:
          purpose: kube-system          