What’s happening

If you install the Bookinfo sample app, but the deployment is stuck in a pending state, you might see the following errors.

  admission webhook "sidecar-injector.istio.io" denied the request: template:
      inject:1: function "Template_Version_And_Istio_Version_Mismatched_Check_Installation"
      not defined

Error creating: Internal error occurred: failed calling webhook "sidecar-injector.istio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=30s": x509: certificate signed by unknown authority

Why it’s happening

Your istioctl version does not match the Istio version that was used during Istio installation.

How to fix it

  1. Ensure that you download the same version of istioctl that you installed in your workload clusters.
  2. Uninstall the Bookinfo app.
  3. Try again.