 each service account.</p></li><li><p>Distributes keys and certificates to the appropriate pods using <a href=https://kubernetes.io/docs/concepts/configuration/secret/>Kubernetes Secrets</a>.</p></li><li><p>Rotates keys and certificates periodically.</p></li><li><p>Revokes a specific key and certificate pair when necessary (future).</p></li></ul><p>The following diagram explains the end to end Istio authentication workflow on Kubernetes:</p><figure style=width:100%><div class=wrapper-with-intrinsic-ratio st