Kuma
Service meshkuma
Envoy-based service mesh with a multi-zone control plane; mTLS is opt-in per mesh.
- Provider
- default
- Kind
- Service mesh
- Category
- Operations
- Official docs
- https://kuma.io/docs/latest/policies/mutual-tls/
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| circuitBreaking | boolean | — | no | false | ▸ false |
| controlPlanes | integer | — | no | — | inherited |
| environment | enum | kubernetes | universal | no | kubernetes | inherited |
| managed | boolean | — | no | false | ▸ false |
| mtls | boolean | — | no | false | ▸ false |
| multiZone | boolean | — | no | false | inherited |
| retries | boolean | — | no | false | ▸ false |
| sidecar | boolean | — | no | true | ▸ true |
| trafficPermissionRequired | boolean | — | no | false | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "kuma", component: "kuma" }# yaml-language-server: $schema=../../schema/component.schema.json # Kuma: Envoy sidecar mesh with a universal/Kubernetes control plane. The "Mutual TLS" policy # page states mTLS is not enabled by default and must be turned on per mesh. schemaVersion: "1" type: "component" id: "kuma" kind: "service-mesh" provider: "default" docs: "https://kuma.io/docs/latest/policies/mutual-tls/" defaults: managed: false sidecar: true mtls: false retries: false circuitBreaking: false properties: environment: type: "enum" values: ["kubernetes", "universal"] default: "kubernetes" multiZone: type: "boolean" default: false trafficPermissionRequired: type: "boolean" default: false