>The disadvantage is that you have to manually add an Envoy container and minimal config to everything you run, which people apparently hate. Correct me if I'm

>The disadvantage is that you have to manually add an Envoy container and minimal config to everything you run, which people apparently hate. Correct me if I'm wrong, but I think envoy (or istio, at least), uses a mutable admission webhook to inject the sidecar into your pod. This means you never have to enter anything into your pod spec. Edit: I noticed you pointed this out with istio.