of Istio, you may see destination rules for hosts other then those shown. However, there should be none with hosts in the <code>foo</code>,
<code>bar</code> and <code>legacy</code> namespace, nor is the match-all wildcard <code>*</code></div></aside></div><h2 id=globally-enabling-istio-mutual-tls>Globally enabling Istio mutual TLS</h2><p>To set a mesh-wide authentication policy that enables mutual TLS, submit <em>mesh authentication policy</em> like below:</p><pre><code class=language-bash data-expandlinks=