fault `istio-citadel:8060`)</td></tr><tr><td><code>--cert-chain &lt;string></code></td><td>Node Agent identity cert file (default `/etc/certs/cert-chain.pem`)</td></tr><tr><td><code>--env &lt;string></code></td><td>Node Environment : unspecified | onprem | gcp | aws (default `unspecified`)</td></tr><tr><td><code>--experimental-dual-use</code></td><td>Enable dual-use mode. Generates certificates with a CommonName identical to the SAN.</td></tr><tr><td><code>--key &lt;string></code></td><td>Node Agent private