Istio tracing and side-car injector pods are not starting

Networking
1

Bug description

Istio tracing and side-car injector pods are not starting.

Details

  • I installed istio on kubernetes cluster using the manifest given below:
apiVersion: flux.weave.works/v1beta1
kind: HelmRelease
metadata:
  name: istio
  namespace: istio-system
spec:
  releaseName: istio
  chart:
    repository: https://gcsweb.istio.io/gcs/istio-prerelease/daily-build/release-1.1-latest-daily/charts/
    name: istio
    version: 1.1.0
  values:
    global:
      enableTracing: true
    tracing:
      enabled: true
      ingress:
        enabled: true
    pilot:
      traceSampling: 100

  • Then after few hours tracing and side-car injector pods went to pending state.

  • Then pods are removed.

  • By looking at the events of replica-set of tracing and side-car injector, I found this error:

Error creating: Internal error occurred: failed calling admission webhook "sidecar-injector.istio.io": Post https://istio-sidecar-injector.istio-system.svc:443/inject?timeout=30s: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)

Expected behavior
Pods should be started automatically.