 in the <code>ServiceAccount</code>&rsquo;s namespace.</p></li><li><p>Otherwise, no secrets are created for the <code>ServiceAccount</code>&rsquo;s namespace.</p></li></ul><p>This logic is captured in the truth table below:</p><table><thead><tr><th><code>ca.istio.io/override</code> value</th><th><code>ca.istio.io/env</code> match</th><th><code>enableNamespacesByDefault</code> configuration</th><th>Workload secret created</th></tr></thead><tbody><tr><td><code>true</code></td><td>yes</td><td><code>true</code>