Skip to content

Commit 43043ce

Browse files
authored
Update README.md (openshift-service-mesh#154)
1 parent 9bc6dde commit 43043ce

File tree

1 file changed

+7
-5
lines changed

1 file changed

+7
-5
lines changed

docs/ossm/create-mesh/README.md

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,19 +1,18 @@
11
# Scoping the service mesh with DiscoverySelectors
2-
This page describes how the control plane monitors/discovers cluster resources and how to manage its scope.
2+
This page describes how the service mesh control plane discovers and observes cluster resources and how to manage this scope.
33

44
A service mesh will include a workload that:
55
1. Has been discovered by the control plane
66
1. Has been [injected with a Envoy proxy sidecar](../injection/README.md)
77

8-
9-
By default, the control plane will watch all namespaces within the cluster, meaning that:
8+
By default, the control plane will watch ("discover") all namespaces within the cluster, meaning that:
109
- Each proxy instance will receive configuration for all namespaces. This includes information also about workloads that are not enrolled in the mesh.
1110
- Any workload with the appropriate pod or namespace injection label will be injected with a proxy sidecar.
1211

13-
This may not be desirable in a shared cluster, and you may want to limit the scope of the service mesh to only a portion of your cluster. This is particularly important if you plan to have [multiple service meshes within the same cluster](./multi-control-planes/README.md).
12+
This may not be desirable in a shared cluster. You may want to limit the scope of the service mesh to only a portion of your cluster. This is particularly important if you plan to have [multiple service meshes within the same cluster](./multi-control-planes/README.md).
1413

1514
### DiscoverySelectors
16-
Discovery selectors provide a mechanism for the mesh administrator to limit the scope of a service mesh. This is done through a Kubernetes [label selector](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors), which defines criteria for which namespaces will be visible to the control plane. Any namespaces not matching are ignored by the control plane entirely.
15+
Discovery selectors provide a mechanism for the mesh administrator to limit the control plane's visibility to a defined set of namespaces. This is done through a Kubernetes [label selector](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#label-selectors), which defines criteria for which namespaces will be visible to the control plane. Any namespaces not matching are ignored by the control plane entirely.
1716

1817
> **_NOTE:_** Istiod will always open a watch to OpenShift for all namespaces. However, discovery selectors will ignore objects that are not selected very early in its processing, minimizing costs.
1918
@@ -120,3 +119,6 @@ Assuming you know which namespaces to include as part of the service mesh, as a
120119
```
121120
122121
See [Multiple Istio Control Planes in a Single Cluster](../multi-control-planes/README.md) for another example of `discoverySelectors` usage.
122+
123+
### Next Steps: Sidecar injection
124+
As described earlier, in addition to the control plane discovering the namespaces to be included in the mesh, workloads must be [injected with a sidecar proxy](../injection/README.md) to be included in the service mesh.

0 commit comments

Comments
 (0)