[lookuptable]

If you're referring to where the key/cert is persisted, it's currently facilitated by Kubernetes' secrets and mounted into Envoy container

Disclaimer: I work on Istio