Update certificate

sudo certbot certonly --manual -d "*.dev.bigbang.dev" -d "*.test.bigbang.dev" -d "*.default.bigbang.dev" -d "*.bigbang.dev" -d bigbang.dev --agree-tos --preferred-challenges dns-01

mkdir certs
sudo cp /etc/letsencrypt/live/bigbang.dev/fullchain.pem certs/
sudo cp /etc/letsencrypt/live/bigbang.dev/privkey.pem certs/
sudo chown -R tom certs

kubectl create secret tls wildcard-cert -n istio-system --key=certs/privkey.pem --cert=certs/fullchain.pem --dry-run=client -oyaml > ingress-cert.yaml

sops --encrypt \
   --pgp=41BFF8BAF2586039F6293D835A2E820C25FE527C \
   --encrypted-regex '^(data|stringData)$' \
   --in-place ingress-cert.yaml

cp ingress-cert.yaml ../../../hack/secrets