mtls-configuration

version: 4.1.0-fractal name: mtls-configuration description: Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.

mTLS Configuration

Comprehensive guide to implementing mutual TLS for zero-trust service mesh communication.

Do not use this skill when

• The task is unrelated to mtls configuration
• You need a different domain or tool outside this scope

Instructions

• Clarify goals, constraints, and required inputs.
• Apply relevant best practices and validate outcomes.
• Provide actionable steps and verification.
• If detailed examples are required, open resources/implementation-playbook.md.

Use this skill when

• Implementing zero-trust networking
• Securing service-to-service communication
• Certificate rotation and management
• Debugging TLS handshake issues
• Compliance requirements (PCI-DSS, HIPAA)
• Multi-cluster secure communication

Core Concepts

🧠 Knowledge Modules (Fractal Skills)

1. 1. mTLS Flow

2. 2. Certificate Hierarchy

3. Template 1: Istio mTLS (Strict Mode)

4. Template 2: Istio Destination Rule for mTLS

5. Template 3: Cert-Manager with Istio

6. Template 4: SPIFFE/SPIRE Integration

7. Template 5: Linkerd mTLS (Automatic)

8. Do's

9. Don'ts