We want to remove internet access from our nodes except for a node group which will host the istio egress gateway pods.
The problem I am having is I will need to update all all deployments to include service entries, virtual services and gateways.
The service entry part is OK as we will use this to white list the domains we allow to go out of the cluster.
But I can’t seem to find a way at the cluster level to direct all traffic destined outbound to the egress pods.
Does anyone have any ideas?