mtls-configuration

1# mTLS Configuration
2 
3Comprehensive guide to implementing mutual TLS for zero-trust service mesh communication.
4 
5## When to Use This Skill
6 
7- Implementing zero-trust networking
8- Securing service-to-service communication
9- Certificate rotation and management
10- Debugging TLS handshake issues
11- Compliance requirements (PCI-DSS, HIPAA)
12- Multi-cluster secure communication
13 
14## Core Concepts
15 
16### 1. mTLS Flow
17 
18```
19┌─────────┐                              ┌─────────┐
20│ Service │                              │ Service │
21│    A    │                              │    B    │
22└────┬────┘                              └────┬────┘
23     │                                        │
24┌────┴────┐      TLS Handshake          ┌────┴────┐
25│  Proxy  │◄───────────────────────────►│  Proxy  │
26│(Sidecar)│  1. ClientHello             │(Sidecar)│
27│         │  2. ServerHello + Cert      │         │
28│         │  3. Client Cert             │         │
29│         │  4. Verify Both Certs       │         │
30│         │  5. Encrypted Channel       │         │
31└─────────┘                              └─────────┘
32```
33 
34### 2. Certificate Hierarchy
35 
36```
37Root CA (Self-signed, long-lived)
38    │
39    ├── Intermediate CA (Cluster-level)
40    │       │
41    │       ├── Workload Cert (Service A)
42    │       └── Workload Cert (Service B)
43    │
44    └── Intermediate CA (Multi-cluster)
45            │
46            └── Cross-cluster certs
47```
48 
49## Templates and detailed worked examples
50…