Workspaces as service discovery boundaries
You can use Gloo workspaces to determine which namespaces can access discovered Istio service mesh resources.
After installation, Gloo Mesh automatically discovers Istio service mesh resources in your cluster. When you create Gloo Mesh resources, Gloo Mesh also generates Istio resources automatically for you. These discovered, generated resources are represented in the management cluster for observability and configuration purposes. For example, when you update a Gloo Mesh resource, Gloo Mesh also updates the generated Istio resources for you. You can also view all of your service mesh resources from the Gloo Mesh UI. For more information about translating Gloo Mesh to Istio resources, see Custom resource translation.
To control which objects Gloo Mesh discovers, you can use Istio discoverySelectors
on the Kubernetes namespaces. If you do not configure discovery selectors for any namespaces, all objects are discovered by default. For more information about discovery selectors, see this Istio blog.
Workspaces affect service discovery in that the discovered resources are available to other namespaces within the workspace. You can also set up exporting and importing across workspaces for discovery, just like for Gloo Mesh resources. For more information, flip through the following figures.