n each node (VM / physical machine) and is responsible for generating and sending out the CSR
(Certificate Signing Request) to get certificates from Istio CA.</p></li><li><p><strong>Bring Your Own CA Certificates</strong>. Allows users to provide their own key and certificate for Istio CA.</p></li><li><p><strong>Persistent CA Key/Certificate Storage</strong>. Istio CA now stores signing key/certificates in
persistent storage to facilitate CA restarts.</p></li></ul><h2 id=known-issues>Known issues</h2><ul><l