Container Service for Kubernetes - ACK - Supports ServiceAccountTokenVolumeProjection on the Kubernetes API Server
Target customers: users who have high security requirements. Features released: you can now enable the ServiceAccountTokenVolumeProjection option on the API server when you create a cluster. This enables service account authentication on pods. This option must be enabled in order to enable two-way TLS authentication on Istio through Secret Discovery Service (SDS).