TLS not working as expected

Hi all!

We adopted linkerd to support tls termination between pods inside our Kubernetes cluster. We have some services that communicating between each other using grpc over secure connection.

When services communicating using public FQDN everything working fine since TLS is terminating on AWS NLB level, but we also would like to provide communication over the Kubernetes network using Kubernetes service hostname (service.namespace.svc.cluster.local). After reading documentation we thought that when you inject linkerd-proxy you are able to communicate securely without any additional configuration.

Did we understood it wrong and we need to configure some additional stuff, like route traffic from k8 service to linkerd-proxy instead of microservice container etc?

Any advice is appreciated. Thanks!