Skip to content
You are viewing the documentation for Solo Enterprise for Istio, formerly known as Gloo Mesh (OSS APIs).

Security

Page as Markdown
Review security features that are built into ambient mesh, such as mTLS, and configure further security policies.
Query workload identity from applications Enterprise
Use the ztunnel metadata server to retrieve your workload's SPIFFE identity and Workload Identity …
SPIFFE trust domain chain verification Enterprise
Enable strict mode to require that the mTLS certificate chain attests the peer's SPIFFE trust …
Overview
Review security features that are built into ambient mesh, such as mTLS, and configure further …
Secure workload identities with SPIRE Enterprise
Use SPIRE node agents to attest and grant identities to ambient mesh workloads, which can be used …
CEL and workload claims authorization for L4 traffic Enterprise Alpha
Use Common Expression Language (CEL) expressions in ztunnel authorization policies to enforce …
Workload identity tokens (WIMSE) Enterprise Alpha
Use WIMSE Workload Identity Tokens with agentgateway to authenticate service-to-service and egress …
Certificate revocation list (CRL) enforcement Enterprise Alpha
Enforce a Certificate Revocation List (CRL) on ztunnel outbound connections to reject peers with …
ResiliencyObservability