r.</p><div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>kubectl <span class="nb">exec</span> <span class="nt">-it</span> ratings-v1-734492171-rnr5l <span class="nt">-c</span> istio-proxy <span class="nt">--</span> /bin/cat /etc/certs/cert-chain.pem <span class="o">&gt;</span> /tmp/pod-cert-chain.pem
</code></pre></div></div><p>The file <code class="highlighter-rouge">/tmp/pod-cert-chain.pem</code> should contain the workload certificate and the CA certificate.<