That was our intent (though we can always be clearer). If your regulatory environment requires that level of encryption, you'll want to use something, like Isti

That was our intent (though we can always be clearer). If your regulatory environment requires that level of encryption, you'll want to use something, like Istio, that provides pod-to-pod mTLS (likely via a proxy or service mesh or both). Disclosure: I work at Google on Kubeflow