ed by Istio CA (named as istio.*). In this example, <code class="highlighter-rouge">istio.default</code>. The Istio CA will issue new certificates for the workloads.<div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>kubectl delete secret istio.default
</code></pre></div></div><p>Note that if you are using different certificate/key file or secret names, you need to change corresponding arguments in <code class="highlighter-rouge">istio-ca-plugin-certs.yaml</code>