mples/sleep/sleep.yaml@)
</code></pre></div></li></ul><h2 id=verify-citadel-runs-properly>Verify Citadel runs properly</h2><p><a href=/v1.1/docs/concepts/security/#pki>Citadel</a> is Istio&rsquo;s key management service. Citadel must run properly for mutual TLS to work correctly. Verify the
cluster-level Citadel runs properly with the following command:</p><pre><code class=language-bash data-expandlinks=true>$ kubectl get deploy -l istio=citadel -n istio-system
NAME            DESIRED   CURRENT   UP-TO-DATE