Citadelclient Failed to Create Certificate

Istio fails to start in vm even after providing all needed files. I transferred cluster.env, istio-token, mesh.yaml, root-cert.pem, hosts automatically generated when running “istioctl x workload entry configure -f workloadgroup.yaml -o “${WORK_DIR}” --autoregister” (showing below) and followed installation guide Istio / Virtual Machine Installation. However, when “running _sudo systemctl start istio”, I get the issues shown in the screenshots below. I’m running version 1.8.1

---------------->
cluster.env
----------------->
CANONICAL_REVISION=‘latest’
CANONICAL_SERVICE=‘reviews-v2’
DNS_AGENT=’’
ISTIO_INBOUND_PORTS=’
ISTIO_METAJSON_LABELS=’{“app”:“reviews-v2”,“service.istio.io/canonical-name":“reviews-v2”,“service.istio.io/canonical-version”:"latest”}’
ISTIO_META_AUTO_REGISTER_GROUP=‘reviews-v2’
ISTIO_META_CLUSTER_ID=‘Kubernetes’
ISTIO_META_DNS_CAPTURE=‘true’
ISTIO_META_MESH_ID=’’
ISTIO_META_WORKLOAD_NAME=‘reviews-v2’
ISTIO_NAMESPACE=‘vm-services’
ISTIO_SERVICE=‘reviews-v2.vm-services’
ISTIO_SERVICE_CIDR=’

POD_NAMESPACE=‘vm-services’
SERVICE_ACCOUNT=‘reviews-v2-vm’
TRUST_DOMAIN=‘cluster.local’
ISTIO_META_NETWORK=‘vm-network’

----------------->
mesh.yaml
----------------->
defaultConfig:
discoveryAddress: istiod.istio-system.svc:15012
proxyMetadata:
CANONICAL_REVISION: latest
CANONICAL_SERVICE: reviews-v2
DNS_AGENT: “”
ISTIO_META_AUTO_REGISTER_GROUP: reviews-v2
ISTIO_META_CLUSTER_ID: Kubernetes
ISTIO_META_DNS_CAPTURE: “true”
ISTIO_META_MESH_ID: “”
ISTIO_META_NETWORK: “”
ISTIO_META_WORKLOAD_NAME: reviews-v2
ISTIO_METAJSON_LABELS: ‘{“app”:“reviews-v2”,“service.istio.io/canonical-name":“reviews-v2”,“service.istio.io/canonical-version”:"latest”}’
POD_NAMESPACE: vm-services
SERVICE_ACCOUNT: reviews-v2-vm
TRUST_DOMAIN: cluster.local
tracing:
zipkin:
address: zipkin.istio-system:9411

----------------->
istio-token (providing the following info:
----------------->
{
“aud”: [
“istio-ca”
],
“exp”: 1608577250,
“iat”: 1608573650,
“iss”: “kubernetes.default.svc”,
kubernetes.io”: {
“namespace”: “vm-services”,
“serviceaccount”: {
“name”: “reviews-v2-vm”,
“uid”: “d5a87b61-31a7-47a6-81f1-58a383e906ab”
}
},
“nbf”: 1608573650,
“sub”: “system:serviceaccount:vm-services:reviews-v2-vm”
}

----------------->
hosts
----------------->
istio-eastwestgateway-external-ip istiod.istio-system.svc

Docs
[X ] Installation
Networking
Performance and Scalability
Extensions and Telemetry
[ X] Security
Test and Release
User Experience
Developer Infrastructure
Upgrade

Run pilot-agent proxy
istio_logs

Run tail -f /var/log/istio/istio.log
pilot-agent proxy