A definition of a matcher that selects endpoints to which the policies should be applied.
The matcher is based on node metadata presented by xDS clients.