From fd79604ea9090d253dcfa3eef9ae5f967c14867a Mon Sep 17 00:00:00 2001 From: SataQiu <1527062125@qq.com> Date: Thu, 7 Mar 2019 15:23:32 +0800 Subject: [PATCH] zh: update content_zh/help/faq/security/check-policy.md (#3545) --- content_zh/help/faq/security/check-policy.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/content_zh/help/faq/security/check-policy.md b/content_zh/help/faq/security/check-policy.md index 8aa7b2f63e..2999e701d2 100644 --- a/content_zh/help/faq/security/check-policy.md +++ b/content_zh/help/faq/security/check-policy.md @@ -6,10 +6,12 @@ weight: 11 `istioctl` 工具为此提供了一个选项，你可以像下面那样做： {{< text bash >}} -$ istioctl authn tls-check httpbin.default.svc.cluster.local +$ istioctl authn tls-check $CLIENT_POD httpbin.default.svc.cluster.local HOST:PORT STATUS SERVER CLIENT AUTHN POLICY DESTINATION RULE -httpbin.default.svc.cluster.local:8000 OK mTLS mTLS default/ default/default +httpbin.default.svc.cluster.local:8000 OK mTLS mTLS default/ default/istio-system {{< /text >}} +其中 `$CLIENT_POD` 是作为客户端服务运行的 Pods 中任意一个的 ID。 + 更多详细信息，请参见[检查双向 TLS 配置](/zh/docs/tasks/security/mutual-tls/#检查-istio-双向-tls-认证的配置)。