>TOKEN_AUDIENCES</code> environment variable allows customizing the checked audience, default remains <code>istio-ca</code>.
(<a href=https://github.com/istio/istio/pull/26482>Pull Request #26482</a>)</p></li><li><p><strong>Added</strong> <code>AuthorizationPolicy</code> now supports a <code>Source</code> of type <code>remoteIpBlocks</code>/<code>notRemoteIpBlocks</code> that map to a new <code>Condition</code> attribute called <code>remote.ip</code> that can also be used in the &ldquo;when&rdquo; clause. I