rtificate authority and to add the root-cert to the trust bundle for mTLS to work.</p></li></ol><h3 id=deploying-istio>Deploying Istio</h3><ol><li><p>Deploy Istio on the cluster using <code>istioctl</code> with the following configuration.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ cat &lt;&lt;EOF &gt; ./istio.yaml
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    base:
      k8s:
        overlays:
          # Amend ClusterRole to add permission