Skip to content

Services

The Services screen lists the services your workloads talk to, internal and external, and is where you register and manage them. A service is a named destination (one or more addresses) that access rules and credential deliveries can target.

Open it from Configure → Services in the sidebar (/ui/service-inventory).

A table with one row per address, with these columns:

  • Status: Active or Inactive.
  • Name: the service name, with its host:port beneath.
  • Type: Internal or External.
  • Dependencies: the workload identities this service sends traffic to.
  • Consumers: the workload identities that send traffic to it.
  • Labels: the service’s labels.

Search by name, host, or type, and filter by Status, Network, and Kind. Each row’s menu offers Edit and Delete.

Choose Create Service and fill in:

  • Display Name (required), and Name (auto-generated from it on create).
  • Addresses (one or more): each has an Address (a hostname, IP, or wildcard such as *.example.com), a Port, and optional Hostname aliases. For a wildcard address you also provide IP Prefixes (CIDR) and Network Names (suggestions include aws, github:api, google, azure).
  • Type: Internal (inside the cluster) or External (outside it). External services have a TLS enabled toggle.
  • Service Labels: key/value pairs used to match the service in access and credential-injection rules.

Edit or delete a service from its row menu. Clicking a service opens a detail panel with its addresses and labels, a telemetry chart, and two tables: Consumers (identities that send traffic to it) and Dependencies (identities it sends traffic to).