 control plane.
Citadel is a large component that maintains its own private signing key, and acts as a Certificate Authority (CA).</p><p>New in Istio 1.4, we introduce a feature to securely provision and manage DNS certificates
signed by the Kubernetes CA, which has the following advantages.</p><ul><li><p>Lighter weight DNS certificate management with no dependency on Citadel.</p></li><li><p>Unlike Citadel, this feature doesn&rsquo;t maintain a private signing key, which enhances security.</p></li><li><p>Si