We are using GKE with managed Istio. We need to configure HTTPS ingress access to a list of HTTP services.

With the default Istio installation on GKE, I do see following two directories in the ingressgateway pod:

ingressgateway-ca-certs
ingressgateway-certs

But I am unable to see the certificate and the key files in there. I am not sure if I am missing anything.

I also see the certificate when I run following:

kubectl get secret istio-ca-secret --namespace istio-system -o yaml

Do we have to explicitly install new certificates to enable HTTPS ingress or is there a way to use the one created by Istio/GKE by default?