/**
 * Certificate Generation for mTLS (Phase 2: Istio Service Mesh)
 *
 * Generates self-signed certificates for zero-trust mTLS communication:
 * - CA certificate (Certificate Authority for the mesh)
 * - Envoy Gateway certificate (signed by CA)
 * - Example Service certificate (signed by CA)
 *
 * All certificates valid for 365 days.
 */
export interface CertificateGenerationResult {
    certsDir: string;
    filesCreated: string[];
}
/**
 * Generate all mTLS certificates for the zero-trust stack
 */
export declare function generateMTLSCertificates(projectPath: string): CertificateGenerationResult;