ken for CSR authentication in clusters where <a href=https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection><code>third-party-jwt</code></a> is not supported.</li><li><strong>Added</strong> Support Istio CA and Kubernetes CA to provision certificates for the control plane, configurable via <code>values.global.pilotCertProvider</code>.</li><li><strong>Added</strong> Istio Agent provisions a key and certificates for Prometheus.</li></ul><h2 