Allow traffic where from-pod label equals to-pod label

Using NetworkPolicy how can I deny incoming traffic on port 1234 for those from-pods who does not have the same label meshId as the in-pod label meshId?

If you need more details, the question is also posted at https://stackoverflow.com/questions/54267737/allow-traffic-where-from-pod-label-equals-to-pod-label.

Thanks for help!

If I understand what you are asking for, there’s no primitive for that. You would have to encode the specific values you want to allow.