IstioD cannot request jwks from service with MTLS enabled

[lhotrifork]

Hi,

I’ve asked the same question previously. At that time it was not supported:

How to tell pilot to fetch JWKS certs using mTLS?

Hi, I have an IDP (keycloak) running in an istio-enabled namespace. The service has a policy like this: apiVersion: authentication.istio.io/v1alpha1 kind: Policy metadata: name: keycloak-jwt-policy namespace: public spec: peers: - mtls: mode: STRICT targets: - name: keycloak ports: - containerPort: 8080 name: http The cluster-default DestinationRule is: apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: default namespace: istio-…

Maybe there’s basis for making a feature request.

/ Lasse