diff --git a/internal/istiooperator/istio-operator-light.yaml b/internal/istiooperator/istio-operator-light.yaml
index e66382ef5..a37c57e26 100644
--- a/internal/istiooperator/istio-operator-light.yaml
+++ b/internal/istiooperator/istio-operator-light.yaml
@@ -137,6 +137,7 @@ spec:
       proxyMetadata:
         BOOTSTRAP_XDS_AGENT: "true"
         CITADEL_SELF_SIGNED_CA_RSA_KEY_SIZE: "4096"
+        WORKLOAD_RSA_KEY_SIZE: "3072"
       tracingServiceName: CANONICAL_NAME_ONLY
     defaultProviders:
       tracing: []
diff --git a/internal/istiooperator/istio-operator.yaml b/internal/istiooperator/istio-operator.yaml
index 5c82039c3..65352dac5 100644
--- a/internal/istiooperator/istio-operator.yaml
+++ b/internal/istiooperator/istio-operator.yaml
@@ -144,6 +144,7 @@ spec:
       proxyMetadata:
         BOOTSTRAP_XDS_AGENT: "true"
         CITADEL_SELF_SIGNED_CA_RSA_KEY_SIZE: "4096"
+        WORKLOAD_RSA_KEY_SIZE: "3072"
       tracingServiceName: CANONICAL_NAME_ONLY
     defaultProviders:
       tracing: []