Skip to content

Istio CSR overview

Istio CSR is an agent that secures Istio workload and control plane components using cert-manager.

Istio CSR implements the gRPC Istio certificate service which authenticates, authorizes, and signs incoming certificate signing requests from Istio workloads, routing all certificate handling through cert-manager installed in the cluster.

This seamlessly matches the behavior of istiod in a typical installation, while allowing certificate management through cert-manager.