istio.io/content/help/faq/security/non-istio-to-istio.md

9 lines
431 B
Markdown

---
title: If mutual TLS is globally enabled, can non-Istio services access Istio services?
weight: 30
---
Non-Istio services cannot communicate to Istio services unless they can present a valid certificate, which is less likely to happen.
This is the expected behavior for *mutual TLS*. However, you can override the
global flag for specific namespaces or services. See
[task](/docs/tasks/security/authn-policy) for more details.