Failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on

failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on
istio proxy sidecar is runing on k8 master node but not on worker nodes.
kubernetes is on rhel 8 using kubeadm and istio versision 1.11.0

kubectl get pods -n default
NAME READY STATUS RESTARTS AGE
helloworld-v1-776f57d5f6-js7fw 1/2 Running 0 63m
helloworld-v2-54df5f84b-8qfxz 1/2 Running 0 63m

[root@nvwlminfk8sd001 opt]# kubectl get namespace -L istio-injection
NAME STATUS AGE ISTIO-INJECTION
default Active 3h8m enabled
istio-system Active 3h6m
kube-node-lease Active 3h8m
kube-public Active 3h8m
kube-system Active 3h8m
sock-shop Active 3h6m enabled
[root@nvwlminfk8sd001 opt]#