/td><td><code>1</code></td><td></td></tr><tr><td><code>security.rollingMaxSurge</code></td><td><code>100%</code></td><td></td></tr><tr><td><code>security.rollingMaxUnavailable</code></td><td><code>25%</code></td><td></td></tr><tr><td><code>security.workloadCertTtl</code></td><td><code>2160h</code></td><td><code>90*24hour = 2160h</code></td></tr><tr><td><code>security.enableNamespacesByDefault</code></td><td><code>true</code></td><td><code>Determines Citadel default behavior if the ca.istio.io/env or ca.isti