nded practice in Istio 1.5.</p><p>In addition we will make Istio require fewer privileges and simplify its
dependencies which in turn make it a more robust system. Historically, you had
to mount certificates into Envoy using Kubernetes Secrets, which were mounted as
files into each proxy. By leveraging the
<a href=https://www.envoyproxy.io/docs/envoy/latest/configuration/security/secret>Secret Discovery Service</a>
we can distribute these certificates securely without concern of them being
intercepted by ot