enerated CSR for the root certificate</li></ul></li><li><p>For each cluster, generate an intermediate certificate and key for the Istio CA.
The following is an example for <code>cluster1</code>:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ make -f ../tools/certs/Makefile.selfsigned.mk cluster1-cacerts
</code></pre><p>This will generate the following files in a directory named <code>cluster1</code>:</p><ul><li><code>ca-cert.pem</code>: the generated intermediate certificates</li>