What identity solution is right for you? You want to create a zero-trust environment and a service mesh seems like the answer, but how should you responsibly configure trust distribution and manage identities? How can you incorporate Istio with your existing PKI solution? Successfully answering and understanding the solutions to these questions is critical to making informed tradeoffs between complexity, flexibility, and risk.

We’ll review the certificate authority configurations and integrations supported by Istio (k8s CSR, Istio CSR, SPIRE, cert-manager, etc.), discuss the benefits and downsides of each solution, and share when or why each solution might work for you. Considering the wide range of identity configurations in Istio, choosing the right identity solution for your environment is not an easy task. After this talk, you’ll be empowered to design or reevaluate an Istio identity solution that works for your specific business needs.