Enable mTLS (strict) istio

Enforce strict mutual TLS for all workloads in namespace

kubectl apply -f - <<EOF
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: default
  namespace: default
spec:
  mtls:
    mode: STRICT
EOF

#istio #service-mesh #mtls #security

more istio all 19 commands →

Inject sidecar manually istioctl kube-inject -f deployment.yaml | kubectl apply -f - Dashboard (Kiali) istioctl dashboard kiali Dashboard (Jaeger) istioctl dashboard jaeger View access logs kubectl logs -l app=myapp -c istio-proxy | head -50 Fault injection — delay # In VirtualService spec.http[].fault.delay