p>Istio ships with an out-of-the box Certificate Authority, but many users want to connect to an existing CA. Currently, you have to implement the <a href=https://github.com/istio/api/blob/master/security/v1alpha1/ca.proto>Istio CSR API</a> and write third-party integrations yourself. In Istio 1.8, we introduced an approach that leverages the <a href=https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/>Kubernetes CSR API</a> and can be integrated with any tools that can use 