urity/authentication/authn-policy/>Authentication Policy</a> for more details.</p></div><h5 id=k8s-health-checks class=question>How can I use Kubernetes liveness and readiness for pod health checks when mutual TLS is enabled?</h5><div class=answer><p>If mutual TLS is enabled, HTTP and TCP health checks from the kubelet will not work without modification, since the kubelet does not have Istio-issued certificates.</p><p>There are several options:</p><ol><li><p>Using probe rewrite to redirect liveness and read