Home / Kong Mesh / Mesh Policies Hub
Edit
Report

Mesh Trust

Overview Examples Configuration reference

Allow encrypted traffic from a different trust domainv2.12+

Allow encrypted mTLS traffic from a different trust domain to the mesh using a PEM certificate bundle.

Prerequisites

  • A MeshService resource must be configured in your mesh.

Configuration 

apiVersion: kuma.io/v1alpha1
kind: MeshTrust
metadata:
  name: zone-2-trust
  namespace: kuma-system
  labels:
    kuma.io/origin: zone
    kuma.io/zone: zone-1
    kuma.io/mesh: default
spec:
  caBundles:
  - type: Pem
    pem:
      value: |-
        -----BEGIN CERTIFICATE-----
        <CERTIFICATE CONTENT>
        -----END CERTIFICATE-----
  trustDomain: test.zone-2.mesh.local
Something wrong?
Report an Issue | Edit this Page
View all Kong documentation

Help us make these docs great!

Kong Developer docs are open source. If you find these useful and want to make them better, contribute today!
Contribute

Still need help?

Ask in our Slack Community
Contact Support