ersion: apps/v1
kind: Deployment
metadata:
  name: sleep
spec:
  ...
  template:
    metadata:
      ...
      annotations:
        ...
        proxy.istio.io/config: |
          CITADEL_SELF_SIGNED_CA_RSA_KEY_SIZE: 4096
    spec:
      ...
</code></pre></div></div></div><h3 id=signature-algorithm>Signature Algorithm</h3><p>By default, the sidecars will create RSA certificates. If you want to change it to
ECC, you need to set <code>ECC_SIGNATURE_ALGORITHM</code> to <code>ECDSA</code>.</p><div id=tabset-docs