m <span class="nt">--from-file</span><span class="o">=</span>/tmp/cert-chain.pem
</code></pre></div></div></li><li>Redeploy the Istio CA, which reads the certificates and key from the secret-mount files:<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>kubectl apply <span class="nt">-f</span> install/kubernetes/istio-ca-plugin-certs.yaml
</code></pre></div></div></li><li>To make sure the workloads obtain the new certificates promptly, delete the secrets generat