SECRET=&lt;the secret&#39;s name as shown in the SSL Cert Secret Name column&gt;</code></pre></li><li><p>Extract the certificate and the key from the secret provided for the ALB:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ mkdir alb_certs
$ kubectl get secret $ALB_SECRET --namespace=default -o yaml | grep &#39;tls.key:&#39; | cut -f2 -d: | base64 --decode &gt; alb_certs/client.key
$ kubectl get secret $ALB_SECRET --namespace=default -o yaml | grep &#39;tls.crt:&#39; | cut -f2 -