How to consume External MongoDB Services with mutual TLS

I have mongodb installed out of mesh (sidecar not injected) , I have tried connecting this external mongodb via egress gateway with plain text (TCP) and achieved successfully. How can I achieve same with mTLS. The one which Istio post defines do not describe how to setup secrets in istio-system also how the certificates will be placed in mongo server. Is there any step by step guide for this problem please.

In Istio side, you can refer to Istio / Egress Gateways with TLS Origination (File Mount) for setting up the egress gateway with TLS.

For MongoDB, you should refer their docs for setting up the TLS and certificates in mongo server, it’s out the control of Istio.