s/containers?topic=containers-ingress_annotation">ALB-specific annotations</a>. IKS provides a
DNS domain name, a TLS certificate that matches the domain, and a private key for the certificate. IKS stores the
certificates and the private key in a <a href=https://kubernetes.io/docs/concepts/configuration/secret/>Kubernetes secret</a>.</p><p>When you start using Istio in your IKS cluster, the recommended method to send traffic to your Istio enabled workloads
is by using the <a href=/v1.16/docs/tasks/traffic-m