Why does a VirtualNode require podSelector.matchLabels and serviceDiscovery.dns?
Aren't they doing the same thing - identifying which Pods (IPs) are member of this virtual node?
The AWS App Mesh Controller For K8s uses podSelector to match every Pod to a VirtualNode (API Design) in the Mesh as long as it does not have an appmesh.k8s.aws/sidecarInjectorWebhook: disabled annotation defined.