><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl create secret generic alb-certs -n istio-system --from-file=trusted.crt --from-file=alb_certs/client.crt --from-file=alb_certs/client.key
secret &#34;alb-certs&#34; created
</code></pre></li><li><p>For mutual TLS, a separate Secret named <code>&lt;tls-cert-secret>-cacert</code> with a <code>cacert</code> key is needed for the ingress gateway.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl create -n 