$ kubectl apply -f install/kubernetes/istio-demo-auth.yaml


$ kubectl get pods -n istio-system


$ kubectl get services -n istio-system


$ kubectl label namespace default istio-injection=enabled
$ kubectl get namespace -L istio-injection


$ kubectl describe pod wordpress-77f7f9c485-k7tt9


$ istioctl authn tls-check <pod name>


$ kubectl create -n istio-system secret tls istio-ingressgateway-certs--key privkey.pem --cert fullchain.pem


kubectl port-forward -n istio-system $(kubectl get pod -n istio-system -l app=jaeger -o jsonpath='{.items[0].metadata.name}') 16686:16686 &


$ kubectl -n istio-system port-forward $(kubectl -n istio-system get pod -l app=grafana -o jsonpath= '{.items[0].metadata.name}') 3000:3000 &