lout-idea"/></svg></div><div class=content>When a namespace transitions from <em>disabled</em> to <em>enabled</em>, Citadel will retroactively generate secrets for all <code>ServiceAccounts</code> in that namespace. When transitioning from <em>enabled</em> to <em>disabled</em>, however, Citadel will not delete the namespace&rsquo;s generated secrets until the root certificate is renewed.</div></aside></div></article><nav class=pagenav><div class=left><a title="Describes Istio's use of Kubernetes webhooks fo