Can l7 network policy be applied to deployment with matching labels

1

Hi,

In all the doc I read, RBAC is applied to a service account.
Is it not possible to apply layer7 network policy that would match deployment labels ?

thanks
Francois

2

ok I was confused initially with CNI cilium plugin that can do l7 network policy matching labels.
I understand typically K8s network policies are applied at l3 and l4 matching labels, and istio provides on top of that RBAC authentication & authorization between service accounts.