OPA (running as host level separate service ) policies are not getting enforced via envoy while calling the API

Question

My scenario - one example-app service exposed through Nodeport in K8s cluster . The service is having one envoy side car . OPA is running as separate service on a same node.