></td><td>The issuer organization used in self-signed CA certificate (default to k8s.cluster.local) (default `k8s.cluster.local`)</td></tr><tr><td><code>--signing-cert &lt;string&gt;</code></td><td>Path to the CA signing certificate file (default ``)</td></tr><tr><td><code>--signing-key &lt;string&gt;</code></td><td>Path to the CA signing key file (default ``)</td></tr><tr><td><code>--upstream-auth &lt;string&gt;</code></td><td>Specifies how the Istio CA is authenticated to the upstream CA. (default `mtls`)