# No caCertificates when mode is simple at destination level | |
apiVersion: networking.istio.io/v1alpha3 | |
kind: DestinationRule | |
metadata: | |
name: db-tls | |
spec: | |
host: mydbserver.prod.svc.cluster.local | |
trafficPolicy: | |
tls: | |
mode: SIMPLE | |
clientCertificate: /etc/certs/myclientcert.pem | |
privateKey: /etc/certs/client_private_key.pem |