From 4041e4d65416fcc4035cd2ec1f9319ff66abeabd Mon Sep 17 00:00:00 2001
From: Liam White <liam@tetrate.io>
Date: Sun, 26 Jan 2020 22:29:39 -0500
Subject: [PATCH] Fix istio mutual in mtls config

---
 modules/security/mtls/config/destinationrule.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/security/mtls/config/destinationrule.yaml b/modules/security/mtls/config/destinationrule.yaml
index 1d218e6..0a755bf 100644
--- a/modules/security/mtls/config/destinationrule.yaml
+++ b/modules/security/mtls/config/destinationrule.yaml
@@ -12,7 +12,9 @@ metadata:
     release: istio
 spec:
   host: "*.local"
-
+  trafficPolicy:
+    tls:
+      mode: ISTIO_MUTUAL
 ---
 # Destination rule to disable (m)TLS when talking to API server, as API server doesn't have sidecar.
 # Customer should add similar destination rules for other services that dont' have sidecar.