How to configure mTLS between two Istio meshes

Feb 2022

Link-out post — the full write-up is on the original post

I wrote this walkthrough for setting up mTLS across two separate Istio meshes, tested on Istio 1.8.1 and Kubernetes 1.17. It ran on a company engineering blog in February 2022.

It covers the two-mesh trust setup end to end: root and intermediate CAs, the cross-mesh service entries, and the checks I used to confirm traffic was actually mutual-TLS and not just routed.

Read the full write-up