r workaround is to include <code>istio-sidecar-injector.istio-system.svc</code> or <code>.svc</code> in the <code>no_proxy</code> value. Make sure that <code>kube-apiserver</code> is restarted after each workaround.</p><p>An <a href=https://github.com/kubernetes/kubeadm/issues/666>issue</a> was filed with Kubernetes related to this and has since been closed.
<a href=https://github.com/kubernetes/kubernetes/pull/58698#discussion_r163879443>https://github.com/kubernetes/kubernetes/pull/58698#discussion_r16387