trong> Support Kubernetes <a href=https://kubernetes.io/docs/reference/access-authn-authz/authentication/#service-account-tokens><code>first-party-jwt</code></a> as a fallback token for CSR authentication in clusters where <a href=https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection><code>third-party-jwt</code></a> is not supported.</li><li><strong>Added</strong> Support Istio CA and Kubernetes CA to provision certificates for the contro