><td></td></tr><tr><td><code>NAMESPACE</code></td><td>String</td><td><code>istio-system</code></td><td>namespace that nodeagent/citadel run in</td></tr><tr><td><code>PILOT_BLOCK_HTTP_ON_443</code></td><td>Boolean</td><td><code>true</code></td><td>If enabled, any HTTP services will be blocked on HTTPS port (443). If this is disabled, any HTTP service on port 443 could block all external traffic</td></tr><tr><td><code>PILOT_CERT_DIR</code></td><td>String</td><td><code></code></td><td></td></tr><tr><td><code>P