Istio-policy istio-telemetry CrashLoopBackOff

k8s version: 1.17
Istio version: 1.4.3
Installed over istioctl :
istioctl manifest apply --set profile=demo
ec2-user@master1 ~] k get pods -n istio-system NAME READY STATUS RESTARTS AGE grafana-6b65874977-jzr89 1/1 Running 0 15m istio-citadel-677f49fccc-66jst 1/1 Running 1 15m istio-egressgateway-6d9b9d5b9c-xlt7s 0/1 Running 0 15m istio-galley-79df4fd667-qzgcd 1/1 Running 0 15m istio-ingressgateway-ccb686f99-x2pl8 0/1 Running 0 15m istio-pilot-54c7444598-4xsj8 0/1 Running 0 15m istio-policy-7bf7848c4b-qlr8l 0/1 CrashLoopBackOff 9 15m istio-sidecar-injector-7cdc986447-bc94z 1/1 Running 1 15m istio-telemetry-5995c84d66-wvkfm 0/1 CrashLoopBackOff 9 15m istio-tracing-c66d67cd9-8rnd5 0/1 CrashLoopBackOff 7 15m kiali-8559969566-mdcxg 1/1 Running 0 15m prometheus-66c5887c86-wnrwb 1/1 Running 0 15m [ec2-user@master1 ~]

ec2-user@master1 ~]$ k logs istio-policy-7bf7848c4b-qlr8l -n istio-system
Mixer started with
MaxMessageSize: 1048576
MaxConcurrentStreams: 1024
APIWorkerPoolSize: 1024
AdapterWorkerPoolSize: 1024
APIPort: 9091
APIAddress: tcp://0.0.0.0:9091
MonitoringPort: 15014
EnableProfiling: true
SingleThreaded: false
NumCheckCacheEntries: 1500000
ConfigStoreURL: mcp://istio-galley.istio-system.svc:9901
CertificateFile: /etc/certs/cert-chain.pem
KeyFile: /etc/certs/key.pem
CACertificateFile: /etc/certs/root-cert.pem
ConfigDefaultNamespace: istio-system
ConfigWaitTimeout: 2m0s
LoggingOptions: log.Options{OutputPaths:string{“stdout”}, ErrorOutputPaths:string{“stderr”}, RotateOutputPath:"", RotationMaxSize:104857600, RotationMaxAge:30, RotationMaxBackups:1000, JSONEncoding:false, LogGrpc:true, outputLevels:“default:info”, logCallers:"", stackTraceLevels:“default:none”}
TracingOptions: tracing.Options{ZipkinURL:“http://zipkin.istio-system:9411/api/v1/spans”, JaegerURL:"", LogTraceSpans:false, SamplingRate:0}
IntrospectionOptions: ctrlz.Options{Port:0x2694, Address:“localhost”}
UseTemplateCRDs: false
LoadSheddingOptions: loadshedding.Options{Mode:0, AverageLatencyThreshold:0, SamplesPerSecond:1.7976931348623157e+308, SampleHalfLife:1000000000, LatencyEnforcementThreshold:100, MaxRequestsPerSecond:0, BurstSize:0}
UseAdapterCRDs: false

2020-01-31T22:01:08.798426Z info mcp Requesting following collections:
2020-01-31T22:01:08.798457Z info mcp [0] istio/config/v1alpha2/templates
2020-01-31T22:01:08.798462Z info mcp [1] istio/config/v1alpha2/adapters
2020-01-31T22:01:08.798480Z info mcp [2] istio/policy/v1beta1/rules
2020-01-31T22:01:08.798485Z info mcp [3] istio/policy/v1beta1/attributemanifests
2020-01-31T22:01:08.798489Z info mcp [4] istio/policy/v1beta1/instances
2020-01-31T22:01:08.798493Z info mcp [5] istio/policy/v1beta1/handlers
2020-01-31T22:01:08.798509Z info parsed scheme: “”
2020-01-31T22:01:08.798518Z info scheme “” not registered, fallback to default scheme
2020-01-31T22:01:08.798535Z info ccResolverWrapper: sending update to cc: {[{istio-galley.istio-system.svc:9901 0 }] }
2020-01-31T22:01:08.798541Z info ClientConn switching balancer to “pick_first”
2020-01-31T22:01:08.798580Z info Awaiting for config store sync…
2020-01-31T22:01:08.798637Z info pickfirstBalancer: HandleSubConnStateChange: 0xc0002dac70, CONNECTING
2020-01-31T22:01:08.800999Z info mcp (re)trying to establish new MCP sink stream
[ec2-user@master1 ~]$

[ec2-user@master1 ~]$ k logs istio-telemetry-5995c84d66-wvkfm -n istio-system
Mixer started with
MaxMessageSize: 1048576
MaxConcurrentStreams: 1024
APIWorkerPoolSize: 1024
AdapterWorkerPoolSize: 1024
APIPort: 9091
APIAddress: tcp://0.0.0.0:9091
MonitoringPort: 15014
EnableProfiling: true
SingleThreaded: false
NumCheckCacheEntries: 1500000
ConfigStoreURL: mcp://istio-galley.istio-system.svc:9901
CertificateFile: /etc/certs/cert-chain.pem
KeyFile: /etc/certs/key.pem
CACertificateFile: /etc/certs/root-cert.pem
ConfigDefaultNamespace: istio-system
ConfigWaitTimeout: 2m0s
LoggingOptions: log.Options{OutputPaths:string{“stdout”}, ErrorOutputPaths:string{“stderr”}, RotateOutputPath:"", RotationMaxSize:104857600, RotationMaxAge:30, RotationMaxBackups:1000, JSONEncoding:false, LogGrpc:true, outputLevels:“default:info”, logCallers:"", stackTraceLevels:“default:none”}
TracingOptions: tracing.Options{ZipkinURL:“http://zipkin.istio-system:9411/api/v1/spans”, JaegerURL:"", LogTraceSpans:false, SamplingRate:0}
IntrospectionOptions: ctrlz.Options{Port:0x2694, Address:“localhost”}
UseTemplateCRDs: false
LoadSheddingOptions: loadshedding.Options{Mode:0, AverageLatencyThreshold:0, SamplesPerSecond:1.7976931348623157e+308, SampleHalfLife:1000000000, LatencyEnforcementThreshold:100, MaxRequestsPerSecond:0, BurstSize:0}
UseAdapterCRDs: false

2020-01-31T22:01:12.604433Z info mcp Requesting following collections:
2020-01-31T22:01:12.604467Z info mcp [0] istio/policy/v1beta1/attributemanifests
2020-01-31T22:01:12.604474Z info mcp [1] istio/policy/v1beta1/instances
2020-01-31T22:01:12.604478Z info mcp [2] istio/policy/v1beta1/handlers
2020-01-31T22:01:12.604482Z info mcp [3] istio/config/v1alpha2/templates
2020-01-31T22:01:12.604487Z info mcp [4] istio/config/v1alpha2/adapters
2020-01-31T22:01:12.604491Z info mcp [5] istio/policy/v1beta1/rules
2020-01-31T22:01:12.604507Z info parsed scheme: “”
2020-01-31T22:01:12.604516Z info scheme “” not registered, fallback to default scheme
2020-01-31T22:01:12.604534Z info ccResolverWrapper: sending update to cc: {[{istio-galley.istio-system.svc:9901 0 }] }
2020-01-31T22:01:12.604541Z info ClientConn switching balancer to “pick_first”
2020-01-31T22:01:12.604589Z info Awaiting for config store sync…
2020-01-31T22:01:12.604665Z info pickfirstBalancer: HandleSubConnStateChange: 0xc0006bbb50, CONNECTING
2020-01-31T22:01:12.605562Z info mcp (re)trying to establish new MCP sink stream
[ec2-user@master1 ~]$

Hi,
I have the same problem as you.
Have you solved it now?

Hello, Alan , we’ve are using RHEL , and always get the same issue, we’ve change to ubuntu and the issue gone away .