:_mod-docs-content-type: ASSEMBLY
[id="cert-manager-operator-integrating-istio"]
= Integrating the {cert-manager-operator} with Istio-CSR
include::_attributes/common-attributes.adoc[]
:context: cert-manager-operator-integrating-istio

toc::[]

[role="_abstract"]
The {cert-manager-operator} provides enhanced support for securing workloads and control plane components in {SMProductName} or Istio. This includes support for certificates enabling mutual TLS (mTLS), which are signed, delivered, and renewed using cert-manager issuers. You can secure Istio workloads and control plane components by using the {cert-manager-operator} managed Istio-CSR agent.

With this Istio-CSR integration, Istio can now obtain certificates from the {cert-manager-operator}, simplifying security and certificate management.

// Creating issuer
include::modules/cert-manager-istio-creating-issuer.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

* xref:../../security/cert_manager_operator/index.adoc#cert-manager-issuer-types_cert-manager-operator-about[{cert-manager-operator} issuer providers]

// Installing using Istio-CSR
include::modules/cert-manager-istio-csr-installing.adoc[leveloffset=+1]

// Setting a log level for istio-csr
include::modules/cert-manager-istio-csr-setting-log-level.adoc[leveloffset=+1]

// Configuring the namespace selector for CA bundle distribution
include::modules/cert-manager-istio-csr-config-namespace-sel.adoc[leveloffset=+1]

// Configuring the CA certificate of the istio server
include::modules/cert-manager-istio-csr-config-ca-cert.adoc[leveloffset=+1]

// Uninstalling cert-manager Operator with Istio-CSR
include::modules/cert-manager-istio-csr-uninstalling.adoc[leveloffset=+1]
