istio improvements

testapp/istio/srv-role.yaml

@@ -0,0 +1,31 @@
+apiVersion: rbac.istio.io/v1alpha1
+kind: ServiceRole
+metadata:
+  name: testapp-srv
+  namespace: default
+spec:
+  rules:
+  - services: ["testapp-srv.default.svc.cluster.local"]
+---
+apiVersion: rbac.istio.io/v1alpha1
+kind: ServiceRoleBinding
+metadata:
+  name: testapp-srv
+  namespace: default
+spec:
+  subjects:
+  - user: "*"
+  roleRef:
+    kind: ServiceRole
+    name: testapp-srv
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: DestinationRule
+metadata:
+  name: testapp-srv
+  namespace: default
+spec:
+  host: testapp-srv.default.svc.cluster.local
+  trafficPolicy:
+    tls:
+      mode: ISTIO_MUTUAL