cept mutual TLS traffic:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl apply -f - &lt;&lt;EOF
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: &#34;usergroup-1-peerauth&#34;
  namespace: &#34;usergroup-1&#34;
spec:
  mtls:
    mode: STRICT
EOF
</code></pre></li><li><p>Deploy a policy for workloads in the <code>usergroup-2</code> namespace to only accept mutual TLS traffic:</p><pre><code class=language-bash data-expandlinks=true data-repo=is