Sidecar Injection Workflow

Sidecar Injection Workflow A workflow diagram generated by Archify. 01 / API Server 02 / Proxy Injector (Admission Webhook) 03 / Injection Conditions 04 / Injection Done · Pod Creation 3 criteria Pod Creation Request · Deployment or other workload · API Server Pod Creation Request Deployment or other workload Webhook Call · admission webhook · 8443 · API Server Webhook Call admission webhook · 8443 Check Conditions · evaluate linkerd.io/inject · Proxy Injector (Admission Webhook) Check Conditions evaluate linkerd.io/inject Namespace Annotation · linkerd.io/inject: enabled · Injection Conditions › 3 criteria Namespace Annotation linkerd.io/inject: enabled Pod Annotation · enabled | disabled override · Injection Conditions › 3 criteria Pod Annotation enabled | disabled override Workload Type · eligible for injection? · Injection Conditions › 3 criteria Workload Type eligible for injection? Inject Sidecar · add linkerd-proxy container · Injection Done · Pod Creation Inject Sidecar add linkerd-proxy container Create Pod · pod runs with proxy · Injection Done · Pod Creation Create Pod pod runs with proxy Legend Pod request / result Proxy Injector Sidecar injection Injection condition