Citadel

Citadel (now integrated into istiod) acts as the Certificate Authority (CA) within the Istio service mesh. It is responsible for generating and rolling certificates for every workload sidecar. We rely on it to automate the complex lifecycle of mTLS certificates, ensuring that service-to-service communication remains encrypted and authenticated with frequent key rotation.