tls.crt

kubectl describe secret your-tls-certificate

kubectl get secret YOUR_TLS_SECRET_NAME --o jsonpath='{.data.tls\.crt}' | base64 -d > /tmp/your_cert.crt
cat /etc/ssl/certs/ca-certificates.crt /tmp/your_cert.crt > ca-bundle.crt
kubectl create configmap temporal-ca-bundle --from-file=ca-bundle.crt=ca-bundle.crt

kubectl get secret, kind: Secret, kubernetes.io/tls