his article to access the service from outside the cluster (<code>&lt;my-proxied-service-hostname></code>):</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl create -n istio-system secret tls &lt;my-secret-name&gt; --key=&lt;key&gt; --cert=&lt;cert&gt;
</code></pre><p>Where <code>&lt;my-secret-name></code> is the name used later for the <code>Gateway</code> resource. <code>&lt;key></code> and <code>&lt;cert></code> are the files for the certificate. <code>&lt;cert></code>.</p