#16585</a>)</p></li><li><p><strong>Added</strong> support for customizing the connection timeout setting when resolving <code>jwksUri</code>.
(<a href=https://github.com/istio/istio/issues/47328>Issue #47328</a>)</p></li><li><p><strong>Added</strong> support for Istio CA to handle node authorization for CSRs with impersonating the identity of remote clusters.
This could help Istio CA to authenticate ztunnel in remote clusters in an external control plane scenario.
(<a href=https://github.com/istio/istio/iss