d on the label selector specified in the
service entry.</p><p>When a workload connects to <code>istiod</code>, the status field in the
custom resource will be updated to indicate the health of the
workload along with other details, similar to how Kubernetes
updates the status of a pod.</p><p>The following example declares a workload entry representing a VM
for the <code>details.bookinfo.com</code> service. This VM has sidecar
installed and bootstrapped using the <code>details-legacy</code> service
account. 