ster1</code> 集群上：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl create namespace istio-system
$ kubectl create secret generic cacerts -n istio-system \
      --from-file=cluster1/ca-cert.pem \
      --from-file=cluster1/ca-key.pem \
      --from-file=cluster1/root-cert.pem \
      --from-file=cluster1/cert-chain.pem</code></pre></li><li><p>返回 Istio 安装的顶层目录：</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ popd</code></p