class=content>This feature is actively in <a href=https://github.com/istio/community/blob/master/FEATURE-LIFECYCLE.md>development</a> and is
considered <code>experimental</code>.</div></aside></div><p>This feature requires Kubernetes version >= 1.18.</p><p>This task shows how to provision Workload Certificates
using a custom certificate authority that integrates with the
<a href=https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/>Kubernetes CSR API</a>.
This feature leverag