Is this the right place to submit this?

• This is not a security vulnerability or a crashing bug
• This is not a question about how to use Istio

Bug Description

I enabled cryptomb and set fallback to true. But the node doesn't support cryptomb. Envoy fallback to private_key from private_key_provider. Current sds implemention doesn't set private_key when cryptomb enabled and this will cause fallback failed.
Envoy's current document about private_key_provider is inaccurate. Related Issue.
Maybe we need to fix this.

Version

istio 1.23.3

Additional Information

No response