Automator: update istio.io@ reference docs (#13686)

content/en/docs/reference/commands/install-cni/index.html

@@ -862,6 +862,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/en/docs/reference/commands/istioctl/index.html

@@ -7156,6 +7156,12 @@ These environment variables affect the behavior of the <code>istioctl</code> com
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/en/docs/reference/commands/operator/index.html

@@ -557,6 +557,12 @@ These environment variables affect the behavior of the <code>operator</code> com
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/en/docs/reference/commands/pilot-agent/index.html

@@ -1452,6 +1452,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/en/docs/reference/commands/pilot-discovery/index.html

@@ -725,6 +725,12 @@ These environment variables affect the behavior of the <code>pilot-discovery</co
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/zh/docs/reference/commands/install-cni/index.html

@@ -862,6 +862,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/zh/docs/reference/commands/istioctl/index.html

@@ -7156,6 +7156,12 @@ These environment variables affect the behavior of the <code>istioctl</code> com
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/zh/docs/reference/commands/operator/index.html

@@ -557,6 +557,12 @@ These environment variables affect the behavior of the <code>operator</code> com
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/zh/docs/reference/commands/pilot-agent/index.html

@@ -1452,6 +1452,12 @@ Only applies when traffic from all groups (i.e. "*") is being redirected
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>

content/zh/docs/reference/commands/pilot-discovery/index.html

@@ -725,6 +725,12 @@ These environment variables affect the behavior of the <code>pilot-discovery</co
 <td>If set, limit Kubernetes watches to a single namespace. Warning: only a single namespace can be set.</td>
 </tr>
 <tr>
+<td><code>ISTIO_WORKLOAD_ENTRY_VALIDATE_IDENTITY</code></td>
+<td>Boolean</td>
+<td><code>true</code></td>
+<td>If enabled, will validate the identity of a workload matches the identity of the WorkloadEntry it is associating with for health checks and auto registration. This flag is added for backwards compatibility only and will be removed in future releases</td>
+</tr>
+<tr>
 <td><code>JWKS_RESOLVER_INSECURE_SKIP_VERIFY</code></td>
 <td>Boolean</td>
 <td><code>false</code></td>