https://discuss.istio.io/t/question-istio-requirements-pod-must-belong-to-at-least-one-service/ I’ve also had this question