uge">root-cert.pem</code> and <code class="highlighter-rouge">cert-chain.pem</code>:<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>kubectl create secret generic cacerts <span class="nt">-n</span> istio-system <span class="nt">--from-file</span><span class="o">=</span>/tmp/ca-cert.pem <span class="nt">--from-file</span><span class="o">=</span>/tmp/ca-key.pem <span class="se">\</span>
<span class="nt">--from-file</span><span class="o">=</span>/tmp/root-cert.pe