s. (<a href=https://github.com/istio/istio/issues/30838>Issue #30838</a>)</p></li><li><p><strong>Fixed</strong> an issue where <code>istiod</code> will not create a self-signed root CA and <code>istio-ca-root-cert</code> configmap when <code>values.global.pilotCertProvider</code> is <code>kubernetes</code>. (<a href=https://github.com/istio/istio/issues/32023>Issue #32023</a>)</p></li><li><p><strong>Improved</strong> the <code>istioctl x workload</code> command to configure VMs to disable inbound <code>ipta