oo
</code></pre></li><li><p>Deploy a policy for workloads in the <code>foo</code> namespace to only accept mutual TLS traffic.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -n foo -f - &lt;&lt;EOF
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: &#34;default&#34;
spec:
  mtls:
    mode: STRICT
EOF
</code></pre></li></ol><h2 id=verifying-the-certificates>Verifying the certificates</h2><p>In this section, we verify that workload certifi