Cilium Mutual Authentication Handshake

Cilium Mutual Authentication Handshake A sequence diagram generated by Archify. connection request request SVID-based auth identity proof out-of-band auth handshake authentication result data connection after policy allows Payload encryption is a separate choice: WireGuard/IPsec or native mTLS Pod A · client workload · Sequence participant Pod A client workload Cilium A · node of Pod A · Sequence participant Cilium A node of Pod A SPIRE Agent · SVID authority · Sequence participant SPIRE Agent SVID authority Cilium B · node of Pod B · Sequence participant Cilium B node of Pod B Pod B · server workload · Sequence participant Pod B server workload Legend request return security default message