istio.io/istio@v0.0.0-20240520182934-d79c90f27776/pkg/config/analysis/analyzers/testdata/destinationrule-mutual-port.yaml (about) 1 # No caCertificates when mode is mutual at port level 2 apiVersion: networking.istio.io/v1alpha3 3 kind: DestinationRule 4 metadata: 5 name: db-mtls 6 spec: 7 host: mydbserver.prod.svc.cluster.local 8 trafficPolicy: 9 portLevelSettings: 10 - port: 11 number: 443 12 tls: 13 mode: MUTUAL 14 clientCertificate: /etc/certs/myclientcert.pem 15 privateKey: /etc/certs/client_private_key.pem 16 sni: my-nginx.mesh-external.svc.cluster.local