istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

zh: update content_zh/help/faq/security/check-policy.md (#3545)

This commit is contained in:
SataQiu 2019-03-07 15:23:32 +08:00 committed by istio-bot
parent 11e9f76a4b
commit fd79604ea9
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
content_zh/help/faq/security/check-policy.md
View File

@ -6,10 +6,12 @@ weight: 11
`istioctl` 工具为此提供了一个选项，你可以像下面那样做：
{{< text bash >}}
$ istioctl authn tls-check httpbin.default.svc.cluster.local
$ istioctl authn tls-check $CLIENT_POD httpbin.default.svc.cluster.local
HOST:PORT STATUS SERVER CLIENT AUTHN POLICY DESTINATION RULE
httpbin.default.svc.cluster.local:8000 OK mTLS mTLS default/ default/default
httpbin.default.svc.cluster.local:8000 OK mTLS mTLS default/ default/istio-system
{{< /text >}}
其中 `$CLIENT_POD` 是作为客户端服务运行的 Pods 中任意一个的 ID。
更多详细信息，请参见[检查双向 TLS 配置](/zh/docs/tasks/security/mutual-tls/#检查-istio-双向-tls-认证的配置)。