f the service account indicates that the workload has a
  # sidecar proxy bootstrapped with this service account. Pods with
  # sidecars will automatically communicate with the workload using
  # istio mutual TLS.
  serviceAccount: details-legacy
  address: 2.2.2.2
  labels:
    app: details-legacy
    instance-id: vm1
</code></pre></div></div></div><p>and the associated service entry</p><div id=tabset-docsreferenceconfignetworkingworkload-entry-2 role=tablist class=tabset><div class=tab-strip data-category