istio: istio1.17.1 generate istio-token using kube-root-ca.crt not istio-ca-root-cert causing multicluster can not communicate

Bug Description

istio1.17.1 generate istio-token using kube-root-ca.crt not istio-ca-root-cert causing multicluster can not communicate

I compared the token from test sa to istio sa，the istio-token kid is the same，this show，it is from kube-root-ca.crt

Version

istio 1.17.1
k8s 1.26.1

Additional Information

No response