=faq-block-question><span class=faq-block-question__text>How to configure the lifetime for Istio certificates?</span><div class=faq-block-question__icon><svg class="icon dropdown-arrow"><use xlink:href="/v1.16/img/icons.svg#dropdown-arrow"/></svg></div></div><div class=faq-block-answer><p>For the workloads running in Kubernetes, the lifetime of their Istio certificates is by default 24 hours.</p><p>This configuration may be overridden by customizing the <code>proxyMetadata</code> field of the <a href=/v1.16