Istio
Hard
Security
What is the purpose of Istio's 'subjectAltNames' field in DestinationRule?
Select your answer:
Show answer and explanation
Answer: To specify the Subject Alternative Names for certificate verification
Explanation
The 'subjectAltNames' field in Istio's DestinationRule is used to specify the Subject Alternative Names for certificate verification. It allows you to specify which SANs should be expected in the server certificate when establishing TLS connections.
More hard Istio questions
- How can you implement header-based routing in Istio?
- What is the purpose of Istio's 'corsPolicy' field in VirtualService?
- What is the purpose of Istio's 'trafficPolicy.connectionPool' field in DestinationRule?
- In Istio ambient mode, which component handles mTLS and L4 policy for the pods on each node?
- A namespace runs in Istio ambient mode. You need HTTP header-based routing and L7 authorization for one of its services. What do you add?
- A workload has AuthorizationPolicies with CUSTOM, DENY, and ALLOW actions. In what order does Istio check them?