# Securing Kubernetes Clusters with Istio and Auth0

**URL:** <https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492>\
**Category:** Blog Discussions\
**Created:** [January 24, 2019, 3:28pm UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492 "2019-01-24T15:28:13Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ramiro](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ramiro/32/8077_2.png) [@ramiro](https://community.auth0.com/u/ramiro)\
**Post date:** [January 24, 2019, 3:28pm UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/1 "2019-01-24T15:28:13Z")

</div>

Learn how to secure your Kubernetes clusters with Istio (a popular open-source service mesh) and Auth0.

→ [Authenticating and Authorizing end-users with Istio and Auth0](https://auth0.com/blog/securing-kubernetes-clusters-with-istio-and-auth0)

 ![Securing%20Kubernetes%20Clusters%20with%20Istio%20and%20Auth0](https://global.discourse-cdn.com/auth0/original/2X/4/44d43828870779c5d9f64d5c1a6fb70006da6aec.png)

---

<div class="post-metadata">

**Author:** ![joalmaraz](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/joalmaraz/32/10380_2.png) [@joalmaraz](https://community.auth0.com/u/joalmaraz)\
**Post date:** [February 5, 2019, 12:44am UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/2 "2019-02-05T00:44:16Z")

</div>

Thanks for that article. It was really nice to see a practical application of the concepts and of Istio after a lot of hearing it is overpowered for the moment, which is probably true due the maturity of the whole scenario, but it will surely be useful for cases like the one you demonstrated.

---

<div class="post-metadata">

**Author:** ![karlmutch](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/karlmutch/32/13895_2.png) [@karlmutch](https://community.auth0.com/u/karlmutch)\
**Post date:** [June 11, 2019, 11:47pm UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/3 "2019-06-11T23:47:41Z")

</div>

Do you have any example of using machine-to-machine JWT token based validation with gRPC Istio and without the use of JS / web applications to perform a login step?

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [June 17, 2019, 9:41am UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/4 "2019-06-17T09:41:08Z")

</div>

Hey there @karlmutch!

Unfortunately I believe we don’t have yet. It’s the only article about Istio we have for now. If you can share with us either via DM (send me a private message) or via our feedback site directly with our product team, more details and context around your usecase it will be super helpful in shaping next articles we create!

> **[Auth0: Secure access for everyone. But not just anyone.](https://auth0.com/feedback)**
>
> Rapidly integrate authentication and authorization for web, mobile, and legacy applications so you can focus on your core business.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [November 5, 2021, 11:12am UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/5 "2021-11-05T11:12:47Z")

</div>



---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [March 7, 2022, 1:38pm UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/6 "2022-03-07T13:38:28Z")

</div>



---

<div class="post-metadata">

**Author:** ![julio.cesar.guerrero](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/julio.cesar.guerrero/32/25708_2.png) [@julio.cesar.guerrero](https://community.auth0.com/u/julio.cesar.guerrero)\
**Post date:** [October 10, 2022, 2:52pm UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/7 "2022-10-10T14:52:15Z")

</div>

Where is this “security/app-credentials.yaml” secret consume from? I mean I could not find anywhere in the code where this secret is used…

Any comment is much appreciated.

Regards,  
Julio

---

<div class="post-metadata">

**Author:** ![rinormaloku](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rinormaloku/32/40958_2.png) [@rinormaloku](https://community.auth0.com/u/rinormaloku)\
**Post date:** [November 1, 2022, 12:42pm UTC](https://community.auth0.com/t/securing-kubernetes-clusters-with-istio-and-auth0/20492/8 "2022-11-01T12:42:18Z")

</div>

Hi Julio,

Here is the file: [istio-auth0-integration/app-credentials.yaml at main · auth0-blog/istio-auth0-integration · GitHub](https://github.com/auth0-blog/istio-auth0-integration/blob/main/security/app-credentials.yaml)
