-bash data-expandlinks=true data-repo=istio>$ diff \
   &lt;(kubectl --context=&#34;${CTX_CLUSTER1}&#34; -n istio-system get secret cacerts -ojsonpath=&#39;{.data.root-cert\.pem}&#39;) \
   &lt;(kubectl --context=&#34;${CTX_CLUSTER2}&#34; -n istio-system get secret cacerts -ojsonpath=&#39;{.data.root-cert\.pem}&#39;)
</code></pre><p>您需要根据<a href=/v1.14/zh/docs/tasks/security/cert-management/plugin-ca-cert/>根证书插件</a>确保在每个集群上都完成了操作。</p><h3 id=step-by-step-diag