diff --git a/policy/v1beta1/cfg.pb.go b/policy/v1beta1/cfg.pb.go
index 1cc9be4816..e61c368167 100644
--- a/policy/v1beta1/cfg.pb.go
+++ b/policy/v1beta1/cfg.pb.go
@@ -306,7 +306,7 @@ type Rule struct {
 	//
 	// * an empty match evaluates to `true`
 	// * `true`, a boolean literal; a rule with this match will always be executed
-	// * `match(destination.service.host, "ratings.*)` selects any request targeting a service whose
+	// * `match(destination.service.host, "ratings.*")` selects any request targeting a service whose
 	// name starts with "ratings"
 	// * `attr1 == "20" && attr2 == "30"` logical AND, OR, and NOT are also available
 	Match string `protobuf:"bytes,1,opt,name=match,proto3" json:"match,omitempty"`
diff --git a/policy/v1beta1/cfg.proto b/policy/v1beta1/cfg.proto
index c051b7eeec..1fdba49a87 100644
--- a/policy/v1beta1/cfg.proto
+++ b/policy/v1beta1/cfg.proto
@@ -119,7 +119,7 @@ message Rule {
   //
   // * an empty match evaluates to `true`
   // * `true`, a boolean literal; a rule with this match will always be executed
-  // * `match(destination.service.host, "ratings.*)` selects any request targeting a service whose
+  // * `match(destination.service.host, "ratings.*")` selects any request targeting a service whose
   // name starts with "ratings"
   // * `attr1 == "20" && attr2 == "30"` logical AND, OR, and NOT are also available
   string match = 1;
diff --git a/policy/v1beta1/istio.policy.v1beta1.pb.html b/policy/v1beta1/istio.policy.v1beta1.pb.html
index eae62809d7..6b3dd9b471 100644
--- a/policy/v1beta1/istio.policy.v1beta1.pb.html
+++ b/policy/v1beta1/istio.policy.v1beta1.pb.html
@@ -1115,7 +1115,7 @@ <h2 id="Rule">Rule</h2>
 <ul>
 <li>an empty match evaluates to <code>true</code></li>
 <li><code>true</code>, a boolean literal; a rule with this match will always be executed</li>
-<li><code>match(destination.service.host, &quot;ratings.*)</code> selects any request targeting a service whose
+<li><code>match(destination.service.host, &quot;ratings.*&quot;)</code> selects any request targeting a service whose
 name starts with &ldquo;ratings&rdquo;</li>
 <li><code>attr1 == &quot;20&quot; &amp;&amp; attr2 == &quot;30&quot;</code> logical AND, OR, and NOT are also available</li>
 </ul>