Tiger Xu / Zhonghu Xu

@ramaraochavali

How do you provide the cert xd-proxy use for tls connect

The doc https://istio.io/latest/docs/setup/install/virtual-machine/ guided using istio token

Sorry by the `certificate expiry`, can you be more accurate which cert do you mean?

xds-proxy connect to istiod, it will use cert if it is provisioned before pilot-agent start, however I do not see where you configured certificate to use

All istio generated cert is ` Issuer: O = cluster.local`, this is the workload cert which is used by istio mtls. It is not used for pilot-agent connecting with istiod.

` failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing: dial tcp: lookup...

I am not sure why 15090 is not up, could check if envoy is running

please show some clues like logs and tell us your istio version

Let me fix it once i have bandwidth