Istio
Easy
Security
Which mutual TLS mode does an Istio sidecar workload accept by default when no PeerAuthentication policy applies to it?
Select your answer:
Show answer and explanation
Answer: PERMISSIVE
Explanation
Without a policy, Istio uses PERMISSIVE, so workloads accept both mutual TLS and plain text. Sidecars still send mutual TLS to each other through auto mTLS, but clients without a proxy can connect in plain text. ISTIO_MUTUAL is a DestinationRule TLS mode for clients, not a PeerAuthentication mode.
More easy Istio questions
- Where do you create an Istio PeerAuthentication policy that applies to the whole mesh?
- On Istio metrics reported by the destination proxy, which connection_security_policy value means the request used mutual TLS?
- What is Istio?
- Which of the following is NOT a core component of Istio?
- What is a sidecar in the context of Istio?
- Which proxy does Istio use for its data plane?