resources found
</code></pre></div></aside></div></li></ul><h2 id=lock-down-to-mutual-tls-by-namespace>Lock down to mutual TLS by namespace</h2><p>After migrating all clients to Istio and injecting the Envoy sidecar, you can lock down workloads in the <code>foo</code> namespace
to only accept mutual TLS traffic.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -n foo -f - &lt;&lt;EOF
apiVersion: &#34;security.istio.io/v1beta1&#34;
kind: &#34;PeerAuthentication&#34;
met