Istio Sidecar 注入失败

Question

我已经成功地在我的 k8 集群中安装了 istio，发布我按照 GitHub ULR https://github.com/istio/istio/blob/master/samples/bookinfo/platform/kube/bookinfo.yaml 部署 bookinfo 应用程序。

部署后，我的 bookinfo 部署 pod 在我的测试 ns 中不可用。

请找到以下 istio-system 命名空间

NAME                                    READY   STATUS    RESTARTS   AGE
grafana-784c89f4cf-cxpcz                1/1     Running   0          15d
istio-egressgateway-bd477794-qv7n8      1/1     Running   0          15d
istio-ingressgateway-79df7c789f-qlqcf   1/1     Running   0          15d
istiod-6dc55bbdd-t5klg                  1/1     Running   0          15d
jaeger-7f78b6fb65-xhz8j                 1/1     Running   0          15d
kiali-dc84967d9-99lwv                   1/1     Running   0          15d
prometheus-7bfddb8dbf-nd4gn             2/2     Running   0          15d

bookinfo 部署

root@master:~/istio-session# kubectl get pod,deployment,rs
NAME                             READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/details-v1       0/1     0            0           62m
deployment.apps/productpage-v1   0/1     0            0           62m
deployment.apps/ratings-v1       0/1     0            0           62m
deployment.apps/reviews-v1       0/1     0            0           62m
deployment.apps/reviews-v2       0/1     0            0           62m
deployment.apps/reviews-v3       0/1     0            0           62m

NAME                                        DESIRED   CURRENT   READY   AGE
replicaset.apps/details-v1-79f774bdb9       1         0         0       62m
replicaset.apps/productpage-v1-6b746f74dc   1         0         0       62m
replicaset.apps/ratings-v1-b6994bb9         1         0         0       62m
replicaset.apps/reviews-v1-545db77b95       1         0         0       62m
replicaset.apps/reviews-v2-7bf8c9648f       1         0         0       62m
replicaset.apps/reviews-v3-84779c7bbc       1         0         0       62m

这里是来自 k8 的事件

stio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": context deadline exceeded
45m         Warning   FailedCreate        replicaset/reviews-v3-84779c7bbc       Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)
42m         Warning   FailedCreate        replicaset/reviews-v3-84779c7bbc       Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": dial tcp 10.102.193.69:443: i/o timeout
52m         Normal    ScalingReplicaSet   deployment/reviews-v3                  Scaled up replica set reviews-v3-84779c7bbc 

注意：需要的端口已经打开 10250,tcp:443,tcp:15017

你能帮我这个忙吗