1. Home
  2. /
  3. Issue certs to your Istio service mesh

Issue certs to Istio service mesh

EJBCA issues and manages certificates for Istio's mTLS certificate needs, ensuring secure communication in service meshes.

hero-sub-2
Istio logo

Automate and scale TLS cert management for your service mesh using cert-manager and EJBCA

Securing communication between services in Kubernetes typically involves using Istio's or another service mesh, which supports built-in mutual TLS (mTLS) and integrates with external PKIs.

EJBCA and cert-manager can be set up to issue certificates for Istio's mTLS authentication, ensuring secure and scalable certificate management. With EJBCA, you can begin with a small setup, without using insecure self-signed certificates. As your certificate requirements evolve, you can easily expand and adapt to meet your changing needs. 

How to get started

Follow this tutorial to learn how to issue mTLS certificates with EJBCA and cert-manager for your Istio service mesh. Here are the steps:

  • Create certificate profile and end entity profile
  • Update the cert-manager RA Role
  • Deploy cert-manager with Helm
  • Deploy istio-csr with Helm
  • Deploy Istio with Helm
  • Deploy Istio sample application

Prerequisites:

Before you begin, you need:

 

Documentation

Tutorials/documentation

Documentation

Check out the supplementary documentation that goes hand-in-hand with our tutorial video.

Docker Hub

Get your hands on the EJBCA Docker container by downloading it now from Docker Hub.

GitHub

Get your hands on the EJBCA Helm chart from GitHub.

YouTube

Take a peek at our YouTube playlist, and browse through some of our other tutorial videos as well.

Discuss

You can ask your questions and learn from PKI specialists in the EJBCA forum on GitHub Discussions.

EJBCA CSR Signer  

EJBCA CSR Signer is an alternative to cert-manager for issuing service mesh certs with EJBCA.

Related open-source projects

This website uses cookies

Cookies consist of small text files. They contain data that is stored on your device. To enable us to place certain types of cookies we need to obtain your consent. At PrimeKey Solutions AB, corp. ID no. 556628-3064, we use the following kinds of cookies. To read more about which cookies we use and storage times, click here to access our cookies policy.

Manage your cookie-settings

Necessary cookies

Check to consent to the use of Necessary cookies
Necessary cookies are cookies that must be placed for basic functions to work on the website. Basic functions are, for example, cookies which are needed so that you can use menus on the website and navigate on the site.

Functional cookies

Check to consent to the use of Functional cookies
Functional cookies need to be placed on the website in order for it to perform as you would expect. For example, so that it recognizes which language you prefer, whether or not you are logged in, to keep the website secure, remember login details or to be able to sort products on the website according to your preferences.

Cookies for statistics

Check to consent to the use of Cookies for statistics
For us to measure your interactions with the website, we place cookies in order to keep statistics. These cookies anonymize personal data.

Cookies for ad-tracking

Check to consent to the use of Cookies for ad-tracking
To enable us to offer better service and experience, we place cookies so that we can provide relevant advertising. Another aim of this processing is to enable us to promote products or services, provide customized offers or provide recommendations based on what you have purchased in the past.

Ad measurement user cookies

Check to consent to the use of Ad measurement user cookies
In order to show relevant ads we place cookies to tailor ads for you

Personalized ads cookies

Check to consent to the use of Personalized ads cookies
To show relevant and personal ads we place cookies to provide unique offers that are tailored to your user data