How to Setup External CA Integration in Istio

Wondering how to set up an external CA (certificate authority) in Istio? In this video, I give a detailed walk-through on why it can be helpful to set up an external root certificate authority for your Istio service mesh, as well as a walk-through of the setup process. The external CA used in this video is AWS Private CA. Certificate management in Istio is at the heart of issuing identities to workloads in the service mesh. It's what enables mTLS. After configuring AWS Private CA as the external root CA for Istio, I'll deploy workloads to test mTLS in the mesh.
#kubernetes #istio
Timestamps:
00:00 - Introduction
00:42 - Why Setup an External Root CA in Istio?
01:45 - Workload Identities in Kubernetes with Service Accounts
02:14 - Certificate Signing Requests (CSR) in Istio with Istio CA
03:30 - Certificate Signing Requests (CSR) in Istio with External CA (AWS Private CA)
06:01 - Walk-through of components during installation and configuration with Cert Manager and Istio CSR
17:03 - Demo walk-through and mTLS test
GitHub Repository:
github.com/LukeMwila/how-to-s...
Other related videos:
How to Configure mTLS in Istio for Secure Kubernetes Workload Communication - • How to Configure mTLS ...
Connect:
GitHub: github.com/LukeMwila
Twitter: / luke9ine
Medium: / outlier.developer
LinkedIn: / lukonde-mwila-25103345
If you found this video helpful, please like the video and subscribe to the channel!

[@palashrangari7854]

Please make a video for Let's Encrypt as external CA.

[@MrKofiray71]

Excellent demo. Are you able to do the same for a Multi Cluster Mesh ?

[@feezankhattak1573]

Please make an video with let's encrypt for ssl. for parent as well as subdomains. Thanks.

[@HrishikeshLimaye]

how can we do it for multi setup environments where clusters resides on different region or different aws accounts?