tain a similar TLS block with
<code>ISTIO_MUTUAL</code> mode, as otherwise it will override the mesh- or namespace-wide TLS settings and disable TLS.</p><p>Re-running the testing command as above, you will see all requests between Istio-services are now completed successfully:</p><pre><code class=language-bash data-expandlinks=true>$ for from in &#34;foo&#34; &#34;bar&#34;; do for to in &#34;foo&#34; &#34;bar&#34;; do kubectl exec $(kubectl get pod -l app=sleep -n ${from} -o jsonpath={.items..metadata.name}