VM Registration Architecture

VM Registration Architecture An architecture diagram generated by Archify. Legacy Application · VM workload · Virtual Machine Legacy Application VM workload Envoy Sidecar · manual install · Virtual Machine Envoy Sidecar manual install Application · Pod container · Kubernetes Cluster › Pod Application Pod container Envoy Sidecar · auto-injected · Kubernetes Cluster › Pod Envoy Sidecar auto-injected istiod · Control Plane · Kubernetes Cluster istiod Control Plane Local communication Local communication mTLS xDS config · certificates xDS config · certificates Virtual Machine Kubernetes Cluster Pod Legend Backend Security External

VM Workload Registration

  • • Register the VM's address and serviceAccount with WorkloadEntry
  • • Pair with ServiceEntry (MESH_INTERNAL) to expose it as an in-mesh service
  • • Envoy is installed manually on the VM

Kubernetes Pod

  • • Envoy Sidecar is injected automatically
  • • Automatic service discovery via Service + Pod