ed</code></pre></div></li></ol><h2 id=create-secrets-for-the-alb-and-the-istio-ingress-gateway>Create secrets for the ALB and the Istio ingress gateway</h2><p>IKS generates a TLS certificate and a private key and stores them as a secret in the default namespace when you register
a DNS domain for an external IP by using the <code>ibmcloud ks nlb-dns-create</code> command. IKS stores the ALB&rsquo;s
certificate and private key also as a secret in the default namespace. You need these credentials to establish 