nt</h2><p>Istio provisions the DNS names and secret names for the DNS certificates based on configuration you provide.
The DNS certificates provisioned are signed by the Kubernetes CA and stored in the secrets following your configuration.
Istio also manages the lifecycle of the DNS certificates, including their rotations and regenerations.</p><h2 id=configure-dns-certificates>Configure DNS certificates</h2><p>The <code>IstioControlPlane</code> custom resource used to configure Istio in the <code>istioctl i