tio-ca&#34;],&#34;expirationSeconds&#34;:&#39;$tokenexpiretime&#39;}}&#39; | kubectl create --raw /api/v1/namespaces/$VM_NAMESPACE/serviceaccounts/$SERVICE_ACCOUNT/token -f - | jq -j &#39;.status.token&#39; &gt; &#34;${WORK_DIR}&#34;/istio-token
</code></pre></li><li><p>Get the root certificate:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl -n &#34;${VM_NAMESPACE}&#34; get configmaps istio-ca-root-cert -o json | jq -j &#39;.&#34;data&#34;.&#34;root-cert.pem&#34;&#39; &gt;