Why the sidecar needs to query the metadata.google.internal server?


My istio is on 1.18.1, using the default profile. I have disabled tracing. When I start a pod with sidecar injection, I get DNS queries to the metadata.google.internal server in my coredns pod.

I wonder what that service is for and if can I disable it.