t integrates with the Kubernetes CSR API) to provision Istio workload certificates." href=/v1.10/docs/tasks/security/cert-management/custom-ca-k8s/>Custom CA Integration using Kubernetes CSR (Experimental)</a></li></ul></li><li role=treeitem aria-label=Authentication><button aria-hidden=true></button><a title="Controlling mutual TLS and end-user authentication for mesh services." href=/v1.10/docs/tasks/security/authentication/>Authentication</a><ul role=group aria-expanded=false class=leaf-section><li role=