# Mutual TLS (mTLS) — REST credentials. The client authenticates with a
# certificate at the TLS layer (it carries no auth header).
#
# Usable in REST slots (spec.target.clusterCredentials, spec.clusterLink.sourceRest.credentials).
mtls:
  client_cert: ./client.pem       # required — client certificate (PEM)
  client_key: ./client.key        # required — client private key (PEM)
  # ca_cert: ./ca.pem             # optional — verify a private/internal CA
  # insecure_skip_verify: false   # optional — test environments only