A platform team wants traffic between microservices inside a Kubernetes cluster to be encrypted in transit and services to authenticate each other's identity without hardcoding certificates. Which approach best satisfies both requirements?

Question

Accepted Answer

B. Using a service mesh with mutual TLS that handles certificate issuance and rotation automatically. A service mesh with mutual TLS provides automatic certificate issuance, rotation, and identity-based service authentication, satisfying both encryption and identity requirements. Option a requires manual certificate management, which is operationally error-prone at scale. Option c leaves internal traffic unencrypted, violating the zero-trust principle that internal network traffic cannot be implicitly trusted.

A platform team wants traffic between microservices inside a Kubernetes cluster to be encrypted in transit and services to authenticate each other's identity without hardcoding certificates. Which approach best satisfies both requirements?

Related Questions

Discussion