RequestAuthentication fails if authentication server uses a certificate signed by a private certification authority

Security
2

You can set the jwksResolverExtraRootCA to use an extra root CA for your jwks server, see Setting pilot.jwksResolverExtraRootCA in IstioOperator - #4 by jbrongtr