the following command:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl exec &#34;$(kubectl get pod -l app=curl -n foo -o jsonpath={.items..metadata.name})&#34; -c istio-proxy -n foo -- openssl s_client -alpn istio -tls1_3 -connect httpbin.foo:8000 | grep &#34;TLSv1.3&#34;</code></pre><p>The text output should include:</p><pre><code class=language-plain data-expandlinks=true data-repo=istio>TLSv1.3</code></pre><p>To check that TLS 1.2 is not allowed, you can run the followin