es <a href=/v1.9/blog/2019/dns-cert/>Chiron</a>, a lightweight component linked with Istiod that signs certificates using the Kubernetes CSR API.</p><p>This task is split into two parts. The first part demonstrates how to use the Kubernetes CA itself to sign workload certificates.
The second part demonstrates how to use a custom CA that integrates with the Kubernetes CSR API to sign your certificates.</p><h2 id=part-1-using-kubernetes-ca>Part 1: Using Kubernetes CA</h2><div><aside class="callout warning"><d