Istio
Easy
Security
Where do you create an Istio PeerAuthentication policy that applies to the whole mesh?
Select your answer:
Show answer and explanation
Answer: In the root namespace, istio-system by default, with no selector
Explanation
A PeerAuthentication in Istio's root namespace without a selector is the mesh-wide policy. A policy without a selector in any other namespace covers only that namespace. Narrower policies win, so namespace and workload policies can still make exceptions to the mesh default.
More easy Istio questions
- On Istio metrics reported by the destination proxy, which connection_security_policy value means the request used mutual TLS?
- What is Istio?
- Which of the following is NOT a core component of Istio?
- What is a sidecar in the context of Istio?
- Which proxy does Istio use for its data plane?
- What is the purpose of Istio's control plane?