In the Istio service mesh, CA integration of Citadel, now part of Istiod, is only used for east-west traffic between the sidecars. There are integrations that you can use to provision certificates automatically for an external, north-south use case, but by design, it only mints certificates for east-west traffic.

Zack Butcher and Shriram Rajagopalan, Tetrate engineers and core Istio contributors, answer questions about how to use Istio in an “Ask Me Anything” webinar held 4/16/2020.

Tetrate, the enterprise service mesh company, offers service mesh solutions powered by the open source projects Istio and Envoy. The company is a top contributor to Istio and includes a plurality of its founders.

Find answers to this and other questions about service mesh by subscribing to Tetrate’s channel.

Learn more at: [ Ссылка ]

Talk to an expert: [ Ссылка ]

свернуть