Looking for a little bit of guidance on my Connect scenario.
I have a consul cluster sitting outside of Kubernetes (EKS) and connect enabled. We have our agents inside of Kubernetes connected to this external cluster and I am able to successfully register and inject envoy. Things are good here.
I am now trying to introduce a VM as part of this mesh in the same DC and I can’t seem to get it to connect. I am able to successfully register the service with the sidecar and Consul see’s them. I do have network connectivity to the pod as we are using the CNI provided ( as far as I have been told). However, when I go to query localhost and let envoy do the routing nothing connects. Still feels like I’m missing something on the k8 to expose the sidecar to the outside world.
There is nothing in the VM Envoy logs that would indicate it’s having any trouble with the VM or Kubernetes. I also have nmaped scanned the pod for ports open and all I see things are closed, which leads me to believe there is a piece missing.
I’m starting to think I might be thinking about this the wrong way. Would this be a situation where we use an ingress gateway and not have the VM participate in the mesh? Or is there an extra config where I expose the envoy sidecar?