y/secret>SDS security</a> by merging Node Agent with Pilot Agent as Istio Agent and removing cross-pod UDS, which no longer requires users to deploy Kubernetes pod security policies for UDS connections.</li><li><strong>Improved</strong> Istio by including certificate provisioning functionality within Istiod.</li><li><strong>Added</strong> Support Kubernetes <a href=https://kubernetes.io/docs/reference/access-authn-authz/authentication/#service-account-tokens><code>first-party-jwt</code></a> as a fallback to