Reading identity of the source service

I have mTLS enabled, and I’d like to read the identity of the source service, that is calling me (e.g. the k8s service name w/ namespace).
What’s the best way to do that?

You can try to use the x_forwarded_client_cert header, make sure you have enabled mTLS first.