Hi I am following this link https://istio.io/latest/docs/tasks/security/authentication/authn-policy/ to try out authentication policy and mutual TLS. I have intsalled istio via istioctl install --set profile=demo -y. And my kubernetes version is v1.19.11.
According to the link I executed below commands
kubectl create ns foo
kubectl apply -f <(istioctl kube-inject -f samples/httpbin/httpbin.yaml) -n foo
kubectl apply -f <(istioctl kube-inject -f samples/sleep/sleep.yaml) -n foo
kubectl create ns bar
kubectl apply -f <(istioctl kube-inject -f samples/httpbin/httpbin.yaml) -n bar
kubectl apply -f <(istioctl kube-inject -f samples/sleep/sleep.yaml) -n bar
kubectl create ns legacy
kubectl apply -f samples/httpbin/httpbin.yaml -n legacy
kubectl apply -f samples/sleep/sleep.yaml -n legacy
But when I do get pods of foo/bar namespace
kubectl get pods -n foo
NAME READY STATUS RESTARTS AGE
httpbin-54f895bb4c-7dq2n 2/2 Running 0 19m
sleep-78c656c8ff-bhx5k 1/2 Running 0 19m
I see that only one container is in ready state. The side car container is not in ready state.
Following are the logs of istio-proxy container
2021-11-11T06:02:17.996723Z error citadelclient Failed to create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.0.0.10:53: read udp 10.244.0.22:46002->10.0.0.10:53: i/o timeout"
2021-11-11T06:02:17.996737Z error cache resource:default request:b7411448-02b9-48bb-aab8-a36966e829fb CSR retrial timed out: rpc error: code = Unavailable desc= connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.0.0.10:53: read udp 10.244.0.22:46002->10.0.0.10:53: i/o timeout"
2021-11-11T06:02:17.996751Z error cache resource:default failed to generate secret for proxy: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.0.0.10:53: read udp 10.244.0.22:46002->10.0.0.10:53: i/o timeout"
2021-11-11T06:02:17.996759Z error sds resource:default Close connection. Failed to get secret for proxy "sidecar~10.244.0.22~sleep-78c656c8ff-bhx5k.foo~foo.svc.cluster.local" from secret cache: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.0.0.10:53: read udp 10.244.0.22:46002->10.0.0.10:53: i/o timeout"
2021-11-11T06:02:17.996842Z info sds resource:default connection is terminated: rpc error: code = Canceled desc = context canceled
I don’t know why I am getting error. Can someone please help me to resolve this issue?