Failed calling webhook “namespace.sidecar-injector.istio.io”

Networking
1

I have make my deployment work with istio ingressgateway before. I am not aware of any changes made in istio or k8s side.

When I tried to deploy, I see an error in replicaset side that’s why it cannot create new pod.

Error creating: Internal error occurred: failed calling webhook
“namespace.sidecar-injector.istio.io”: Post
“https://istiod.istio-system.svc:443/inject?timeout=10s”: dial tcp
10.104.136.116:443: connect: no route to host

When I try to go inside api-server and ping 10.104.136.116 (istiod service IP) it just hangs.

What I have tried so far:

  • Deleted all coredns pods
  • Deleted all istiod pods
  • Deleted all weave pods
  • Reinstalling istio via istioctl x uninstall --purge
  • turning all of VMs firewall
  • sudo iptables -P INPUT ACCEPT
    sudo iptables -P FORWARD ACCEPT
    sudo iptables -P OUTPUT ACCEPT
    sudo iptables -F
  • restarted all of the nodes

Setup

  • k8s version: 1.21.2
  • istio: 1.10.3
  • HA setup
  • CNI: weave
  • CRI: containerd