Mastering Service Mesh

Enabling mTLS at the namespace level

To enable STRICT mTLS at the namespace level, we can use Policy instead of MeshPolicy and define the namespace that it will be applied to. Let's get started:

1. Define mTLS for the istio-lab namespace:

# Script : 07-create-mtls-for-istio-lab-namespace.yamlapiVersion: authentication.istio.io/v1alpha1kind: Policymetadata: name: default namespace: istio-labspec: peers: - mtls: {}

2. Apply the mTLS security policy at the namespace level:

$ kubectl -n istio-lab apply -f 07-create-mtls-for-istio-lab-namespace.yaml policy.authentication.istio.io/default created

Next, we will verify the TLS configuration.