xargs kubectl get secret -n cert-manager -o jsonpath=&#39;{.data.ca\.crt}&#39; | base64 -d | sed &#39;s/^/        /&#39;)
$ export BARCA=$(kubectl get clusterissuers bar -o jsonpath=&#39;{.spec.ca.secretName}&#39; | xargs kubectl get secret -n cert-manager -o jsonpath=&#39;{.data.ca\.crt}&#39; | base64 -d | sed &#39;s/^/        /&#39;)
</code></pre><h2 id=deploy-istio-with-default-cert-signer-info>Deploy Istio with default cert-signer info</h2><ol><li><p>Deploy Istio on the cluster using <code>istioctl</cod