<p>I am istio-init(version 1.6.5) as a sidecar container in my k8s cluster, it been working fine for a while. Today, out of blue my pod has gone to Init:CrashloopbackOff</p>
<pre><code>NAME                                 READY       STATUS                     RESTARTS       AGE 
healthscore-green-79c9c5c764-cndm6    0/2       Init:CrashLoopBackOff          388        2d17h
</code></pre>
<p>on kubectl describe it shows:</p>
<pre><code>istio-init: 
  Container ID: docker://657be7ddd9058406da7768596c81490b426a376816b8b4f20fbb63c0c44b5a13 
  Image: docker.io/istio/proxyv2:1.6.5 
  Image ID: docker-pullable://istio/proxyv2@sha256:ec2df06d76e8845fbce0ac1b4b85ab06a7beabab8a69fcc3bb2b573378b71c47
  Port: Host 
  Port: Args: istio-iptables -p 15001 -z 15006 -u 1337 -m REDIRECT -i * -x -b * -d 15090,15021,15020      
  State: Waiting 
  Reason: CrashLoopBackOff 
  Last State: Terminated Reason: 
  Error Exit Code: 2 
  Started: Mon, 28 Sep 2020 14:21:23 +0530 
  Finished: Mon, 28 Sep 2020 14:21:23 +0530
  Ready: False 
  Restart Count: 392 
  Limits:
    cpu: 100m 
    memory: 50Mi
  Requests: 
     cpu: 10m
     memory: 10Mi
</code></pre>
<p>and kubectl logs of the istio-container prints the following stack trace:
<a href="https://pastebin.com/GAuNndd5" rel="nofollow noreferrer">https://pastebin.com/GAuNndd5</a></p>
<p>Also one thing I noticed, since <code>istio-init</code> side car is failing according to kubernetes, but my application is able to serve http requests.
It get fixed automatically after some time.
but reoccurs once in a while.</p>

Ajay Pratap
<p>From the logs it's failing to <code>executeIptablesRestoreCommand</code>. The kubernetes nodes might have gone through some reboot or upgrade .Disable the SELinux temporarily by doing <code>sudo setenforce 0</code> on the kubernetes node and then re-run your <code>istioctl kube-inject</code></p>
