is allowed to run the named service.</p><h3 id=key-management-and-distribution>Key management and distribution</h3><p>Istio Auth provides a per-cluster CA (Certificate Authority) and automated key &amp; certificate management. In this context, Istio Auth:</p><ul><li><p>Generates a key and certificate pair for each service account.</p></li><li><p>Distributes keys and certificates to the appropriate pods using <a href=https://kubernetes.io/docs/concepts/configuration/secret/>Kubernetes Secrets</a>.</p></li><l