Istio + SDS + cert-manager (Let's Encrypt)

For HTTP01 check this topic as well: Using Gateway + VirtualService + http01 + SDS