><code>istio-ca-root-cert</code></td>
<td>The name of the ConfigMap that stores the Root CA Certificate that is used by istiod</td>
</tr>
<tr id='pilot-cert-provider'>
<td><a href='#pilot-cert-provider'><code>PILOT_CERT_PROVIDER</code></a></td>
<td>String</td>
<td><code>istiod</code></td>
<td>The provider of Pilot DNS certificate. K8S RA will be used for k8s.io/NAME. &#39;istiod&#39; value will sign using Istio build in CA. Other values will not not generate TLS certs, but still  distribute ./etc/certs/root