>Istio Mixer</a> such that photo-frontend cannot access datastore.</p><p>In this setup, Istio CA is able to provide keys and certificates management for all namespaces, and isolate microservice deployments from each other.</p><h2 id="future-work">Future work</h2><ul><li><p>Inter-cluster service-to-service authentication</p></li><li><p>Powerful authorization mechanisms: ABAC, RBAC, etc</p></li><li><p>Per-service auth enablement support</p></li><li><p>Secure Istio components (Mixer, Pilot)</p></li><li><p>End-