and authorization are now in
Beta. SDS is now stable. Authorization now supports Deny semantics to enforce
mandatory controls that cannot be overridden. We have combined the Node agent
and the Istio agent into a single binary, which means we no longer require
configuration of a <code>PodSecurityPolicy</code>.</p><p>The improvements don&rsquo;t stop there. We no longer need to mount certificates on
every pod nor have to restart Envoy when certificates change. Certificates are
delivered directly from Istiod t