rt for TCP services when you enable Istio mutual TLS.</p><h2 id=container-ports-are-no-longer-required>Container ports are no longer required</h2><p>Previous releases required that pods explicitly declare the Kubernetes <code>containerPort</code> for each container as a security measure against trampolining traffic. Istio 1.3 has a secure and simpler way of handling all inbound traffic on any port into a <span class=term data-title="Workload Instance" data-body='<p>A single instantiation of a <a href="/docs