to <a href=/v1.16/docs/ops/configuration/mesh/app-health-check/#separate-port>Health Checking of Istio Services</a> for more information.</p></li><li><p>Using the <a href=/v1.16/docs/tasks/security/authentication/mtls-migration><code>PERMISSIVE</code> mode</a> for the workload, so it can accept both plaintext and mutual TLS traffic. Please keep in mind that mutual TLS is not enforced with this option.</p></li></ol></p></div></div><div class="faq-block faq-block--collapsed" id=cert-lifetime-config><div class