Thanks @douglas-reid. Just wondering, is istio-policy service check always invoked by Envoy for any service to service interaction or is it conditional ? I have the BookInfo app deployed to my cluster, but when checking Prometheus for metrics, I only see calls to the istio-telemetry service, but none to istio-policy service.