trustbundle: refactoring code that fetches CA roots when CA is not running (#31653)
trustbundle: refactoring code that fetches CA roots when CA is not running (#31653)


istio/istio,istio/istio,istio/istio,istio/istio,istio/istio