<p>I'm a noob with Istio and K8s so sorry if this question sounds a little dumb.</p>
<p>I'm trying to provide my own certs to the Gateway deployment for which I created secrets like below.</p>
<pre><code>$ kubectl create -n istio-system secret tls certs --key example.comkey.pem --cert example.com.pem
$ kubectl create -n istio-system secret generic ca-certs --from-file=rootCA.pem
</code></pre>
<p>Edited my deployment</p>
<pre><code>sidecar.istio.io/userVolumeMount: '[{&quot;name&quot;:&quot;certs&quot;, &quot;mountPath&quot;:&quot;/etc/certs&quot;, &quot;readonly&quot;:true},{&quot;name&quot;:&quot;ca-certs&quot;, &quot;mountPath&quot;:&quot;/etc/ca-certs&quot;, &quot;readonly&quot;:true}]'
sidecar.istio.io/userVolume: '[{&quot;name&quot;:&quot;certs&quot;, &quot;secret&quot;:{&quot;secretName&quot;:&quot;certs&quot;}},{&quot;name&quot;:&quot;ca-certs&quot;, &quot;secret&quot;:{&quot;secretName&quot;:&quot;ca-certs&quot;}}]'
</code></pre>
<p>Followed the steps provided in <a href="https://stackoverflow.com/a/57347134/1529274">here</a> and <a href="https://istio.io/latest/docs/tasks/traffic-management/egress/egress-gateway-tls-origination/#redeploy-the-egress-gateway-with-the-client-certificates" rel="nofollow noreferrer">here</a> but I still do not see the files mounted.</p>
<p>Am I missing something?</p>
<pre><code>$ kubectl version
Client Version: version.Info{Major:&quot;1&quot;, Minor:&quot;21&quot;, GitVersion:&quot;v1.21.2&quot;, GitCommit:&quot;092fbfbf53427de67cac1e9fa54aaa09a28371d7&quot;, GitTreeState:&quot;clean&quot;, BuildDate:&quot;2021-06-16T12:59:11Z&quot;, GoVersion:&quot;go1.16.5&quot;, Compiler:&quot;gc&quot;, Platform:&quot;darwin/amd64&quot;}
Server Version: version.Info{Major:&quot;1&quot;, Minor:&quot;21&quot;, GitVersion:&quot;v1.21.2&quot;, GitCommit:&quot;092fbfbf53427de67cac1e9fa54aaa09a28371d7&quot;, GitTreeState:&quot;clean&quot;, BuildDate:&quot;2021-06-16T12:53:14Z&quot;, GoVersion:&quot;go1.16.5&quot;, Compiler:&quot;gc&quot;, Platform:&quot;linux/amd64&quot;}
</code></pre>

Shriram Sharma
<p>I was able to resolve this issue. I'm not sure if this is the right way to do it though.
I missed adding <code>volumeMounts</code> and <code>volumes</code>. Once I made the below change, I could see my files mounted.</p>
<pre><code>volumeMounts:
- name: certs
  mountPath: /etc/certs
  readOnly: true
- name: ca-certs
  mountPath: /etc/ca-certs
  readOnly: true

volumes:
- name: certs
  secret:
  secretName: certs
  optional: true
- name: ca-certs
  secret:
  secretName: ca-certs
  optional: true
</code></pre>
