:_mod-docs-content-type: ASSEMBLY
[id="zero-trust-manager-mesh-integration_{context}"]
= Integrating Red Hat OpenShift Service Mesh with Zero Trust Workload Identity Manager in a single-cluster
include::_attributes/common-attributes.adoc[]
:context: zero-trust-manager-mesh-integration

toc::[]

[role="_abstract"]
Deploy and configure {spire-full} as the certificate authority (CA) for {SMProductName} workloads, replacing the Istio built-in CA with SPIFFE-compliant identities and automatically rotated short-lived certificates.

// About SPIRE and Service Mesh integration
include::modules/zero-trust-manager-about-spire-integration.adoc[leveloffset=+1]

// About service mesh architecture
include::modules/zero-trust-manager-mesh-architecture.adoc[leveloffset=+1]

// Deploy service mesh and spire
include::modules/zero-trust-manager-deploy-spire.adoc[leveloffset=+1]

// Deploy istio
include::modules/zero-trust-manager-deploy-istio.adoc[leveloffset=+1]

[id="additional-resources-service-mesh-zero-trust_{context}"]
== Additional resources

* link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html-single/about/index[About OpenShift Service Mesh]
* link:https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.3/html-single/installing/index#ossm-supported-platforms-configurations[Installing OpenShift Service Mesh]
