Istio comes with a couple of custom resource definitions for configuring user and service-to-service authentication as well as authorization policies. This article takes a stab at explaining access control in Istio, what authentication and authorization means and how the different Istio resources work together to answer the access control question:

Read full article on The New Stack