 which is only when SDS and mutual TLS are enabled. SDS is off by default and must be explicitly enabled by the operator in all versions of Istio prior to Istio 1.5. Istio&rsquo;s default secret distribution implementation based on Kubernetes secret mounts is not affected by this vulnerability.</p><p><strong>Detection</strong></p><p>To determine if SDS is enabled in your system, run:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl get pod -l app=pilot -o yaml | grep SDS_ENA