istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

zh translation: faq/security/non-istio-to-istio.md (#9267) 

* zh translation: faq/security/non-istio-to-istio.md

Signed-off-by: zc <ce.zheng@daocloud.io>

* Update content/zh/faq/security/non-istio-to-istio.md

Co-authored-by: Kebe <kebe.liu@daocloud.io>

Co-authored-by: zc <ce.zheng@daocloud.io>
Co-authored-by: Kebe <kebe.liu@daocloud.io>
This commit is contained in:
zc 2021-03-16 21:23:45 +08:00 committed by GitHub
parent 4749baccd0
commit 2b0cd2c35a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
content/zh/faq/security/non-istio-to-istio.md
View File

@ -1,7 +1,7 @@
---
title: 如果启用了全局 TLS 双向认证，那么非 Istio 服务还可以访问 Istio 服务吗？
title: 如果全局启用 TLS 双向认证，那么非 Istio 服务还可以访问 Istio 服务吗？
weight: 30
---
非 Istio 服务无法与 Istio 服务通信。除非它能出示有效证书，但这基本不可能。
非 Istio 服务无法与 Istio 服务通信。除非它能提供有效证书，但这基本不可能。
这是 *双向 TLS 认证* 的预期表现。
但是，您可以为特定的 namespace 或服务重写全局标志。详见：[任务](/zh/docs/tasks/security/authentication/authn-policy)
但是，您可以覆盖指定 namespace 或服务的全局标志。详见：[认证策略](/zh/docs/tasks/security/authentication/authn-policy)