mirror of
https://gitlab.kube.huskypup.net/Scooby/Homelabv4.git
synced 2026-08-21 05:26:49 +00:00
13 lines
370 B
YAML
13 lines
370 B
YAML
# Mesh-wide STRICT mTLS - Zero Trust
|
|
# All service-to-service communication must present valid SPIFFE SVID
|
|
# In ambient mode, ztunnel enforces mTLS for all enrolled namespaces
|
|
# Services outside the ambient mesh will be rejected
|
|
apiVersion: security.istio.io/v1
|
|
kind: PeerAuthentication
|
|
metadata:
|
|
name: default
|
|
namespace: istio-system
|
|
spec:
|
|
mtls:
|
|
mode: STRICT
|