From dff67c2e7d9ecefe0c19e5e752af33a7b3cbddd8 Mon Sep 17 00:00:00 2001 From: Ahmet Alp Balkan Date: Tue, 9 Oct 2018 11:49:18 -0700 Subject: [PATCH] README: add istio mTLS instructions Signed-off-by: Ahmet Alp Balkan --- README.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index aa6709b..72a7a09 100644 --- a/README.md +++ b/README.md @@ -138,8 +138,14 @@ Find **Protocol Buffers Descriptions** at the [`./pb` directory](./pb). 1. Create a GKE cluster. -2. Install Istio **without mutual TLS** option. (Istio mTLS is not yet supported - on this demo.) +2. Install Istio **without mutual TLS** authentication option. + + > (Optional) If you'd like to enable mTLS in the demo app, you need to + > make a few changes to the deployment manifests: + > + > - `kubernetes-manifests/frontend.yaml`: delete "livenessProbe" and + > "readinessProbe" fields. + > - `kubernetes-manifests/loadgenerator.yaml`: delete "initContainers" field. 3. Install the automatic sidecar injection (annotate the `default` namespace with the label):