tput to be empty.</p></li><li>Verify the certificate chain from the root certificate to the workload certificate:<pre><code class="language-bash">head /tmp/pod-cert-chain.pem -n 18 &gt; /tmp/pod-cert-chain-workload.pem
openssl verify -CAfile &lt;(cat /tmp/ca-cert.pem /tmp/root-cert.pem) /tmp/pod-cert-chain-workload.pem
</code></pre><p>Expect the following output:</p><pre><code class="language-bash">/tmp/pod-cert-chain-workload.pem: OK
</code></pre></li></ol><h2 id="cleanup">Cleanup</h2><ul><li><p>To remove 