...
RequestAuthentication:
AuthorizationPolicy:
As you can see from the policy config, the rule is applied on Enrichment Service. Any call to Enrichment Service, the envoy proxy will apply this rule and invoke the Istio over OIDC to authenticate the JWT.