setup mtls on the backend
dzfranklin opened this issue · comments
https://cert-manager.io/docs/usage/csi-driver/ looks not too bad ... until you get to the part where an issuer is separate
this guide looks much more reasonable https://tanzu.vmware.com/developer/guides/kubernetes-mtls/
https://github.com/grpc/grpc-go/blob/master/examples/features/encryption/mTLS/server/main.go
or maybe it's easier to have istio terminate tls and handle authz for us?