Service security capabilities

Access Control

You will start by denying all traffic.

And then begin poking holes in your service mesh "firewall".

Create AuthorizationPolicy for each BookInfo service.

Allow per user access

Reset BookInfo Subsets (reset destination rules)

Identity Verification

Note: this lab uses the sample application HTTPbin.

Using Meshery, deploy the HTTPbin sample application.

Add Claims

Def

Mutual TLS

Using Meshery, you can change mTLS enforcement for a namespace.

To configure mTLS on more selective level, you can change and apply this configuration: