<p>I am using kubernetes and istio.</p>

<p>I need to call https service outside my mesh, and this called service using internal CA authority, which mean I need to trust the server side certificate.</p>

<p>Can I trust the certificate on istio level instead of each micro-service?</p>

<p>you can do it using cert-manager &amp; ingress probably which will manage the ssl certificates :</p>

<p>you can check it out more at : </p>

<blockquote>
  <p><a href="https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes" rel="nofollow noreferrer">https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes</a></p>
</blockquote>

<p>you can also refer documents of istio where there option for HTTPS for managed gateway: <a href="https://istio.io/docs/tasks/traffic-management/secure-ingress/" rel="nofollow noreferrer">https://istio.io/docs/tasks/traffic-management/secure-ingress/</a></p>
