re defined <a href="https://github.com/istio/istio/blob/master/samples/bookinfo/kube/bookinfo.yaml">here</a>.</p><p>Note that Istio uses <a href="https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account">Kubernetes service account</a> as service identity, which offers stronger security than service name (refer <a href="/v0.2/docs/concepts/security/mutual-tls.html#identity">here</a> for more information). Thus the certificates used in Istio do not have service name, which is the inf