kloadEntry</code> objects created for it when it joins the mesh.</p><h2 id=security-and-secrets>Security and secrets</h2><p>Certificates are now sent from Istiod to gateways, rather than them being read directly from Kubernetes. This reduces the privileges of gateways, which are often publicly exposed, improving our &ldquo;defense in depth&rdquo; security posture. Additionally, this opens the door for increased performance and lower memory footprint, and additional extensibility in certificate sources.</p><