[podSelector] It selects pods in current namespace labelled as app=backend. [namespaceSelector] It allow traffic from Pods of namespaces labelled tenant=web.