e="padding-bottom: 56.25%"><figure> <a href="./img/mutual-tls/auth.svg"> <img class="element-to-stretch" src="./img/mutual-tls/auth.svg" alt="Components making up the Istio auth model." title="Istio Auth Architecture" /> </a></figure></div><p>Istio Auth Architecture</p></div><p>As illustrated in the diagram, Istio Auth leverages secret volume mount to deliver keys/certs from Istio CA to Kubernetes containers. For services running on VM/bare-metal machines, we introduce a node agent, which is a process runni