mtls-configuration

Apply provided mTLS templates to enforce mesh-wide or workload-specific mutual TLS using Istio PeerAuthentication and DestinationRule. This secures service-to-service communication in zero-trust environments.

Yes, cert-manager integrates with Istio to manage mTLS certificate lifecycles. You can use provided cert-manager templates alongside rotation strategies to automate secure service-to-service communication.

The best way to enforce zero-trust security is applying mesh-wide mutual TLS policies. Standard templates for Istio and Linkerd enable strict mutual authentication across all workloads, preventing insecure service communications.

Yes, this approach supports configuring external TLS policies for external services. It provides secure deployment patterns and templates to manage mutual TLS beyond internal mesh traffic.

Troubleshoot mTLS issues in multi-cluster deployments using provided debugging practices and secure deployment patterns. These strategies help identify and resolve mutual TLS failures across distributed environments.

SPIRE is supported but not strictly required for workload-specific mTLS. You can use cert-manager or standard mesh templates for identities, while SPIRE provides specialized workload identity management for zero-trust environments.