-repo=istio>$ kubectl exec -n istio-system &#34;$(kubectl -n istio-system get pods -l istio=egressgateway -o jsonpath=&#39;{.items[0].metadata.name}&#39;)&#34; -- ls -al /etc/istio/nginx-client-certs /etc/istio/nginx-ca-certs
</code></pre><p><code>tls.crt</code> and <code>tls.key</code> should exist in <code>/etc/istio/nginx-client-certs</code>, while <code>ca-chain.cert.pem</code> in
<code>/etc/istio/nginx-ca-certs</code>.</p></li></ol><h3 id=configure-mutual-tls-origination-for-egress-traffic>Configure mu