s/setup/kubernetes/mesh-expansion/>Istio Mesh Expansion</a> (which requires the CSR service API).</p><h2 id=before-you-begin>Before you begin</h2><ul><li><p>Set up Istio by following the instructions in the
<a href=/v1.0/docs/setup/kubernetes/quick-start/>quick start</a> with global mutual TLS enabled:</p><pre><code class=language-command>$ kubectl apply -f install/kubernetes/istio-demo-auth.yaml</code></pre><p><em><strong>OR</strong></em></p><p>Using <a href=/v1.0/docs/setup/kubernetes/helm-install/>Helm</