Istio Strict mTLS + Prometheus

Security
1

Hi there
Trying to get Istio, Kiali and Prometheus working using strict mTLS but I am miserably failing.
Their documentation mentions mounting the cert, key and ca via a volume and doing some magic with annotations but I have not been able to find a way to deploy Prometheus via the operator with the correct annotations using Helm.

Has anyone actually made this work? All I encounter when searching for this is failed attempts. No examples, just frustrated souls looking for an answer.

Are there any saviors out there?

Kind regards,
Patrik

2

In case someone else runts into this post looking for the same answer. To you I wish good luck.
In our case we contacted Rancher support and they said it is not officially supported and advised us to avoid strict mTLS for now and this is what we’ll do.