<p><code>Istio-citadel</code> pods of <code>istio 1.4.10 helm</code> release, are restarted periodically.</p>
<p>2 replicas of <code>istio-citadel</code> are running.</p>
<p>This happens once in every 4-5 days, when the number of CSR requests reaches 28.3k and memory reaches 9.8G. Memory increases steadily after the restart until it crashes again. CPU spike is also observed consuming around 10 CPU.</p>
<p>Could see the below error log 4 mins before the restart.</p>
<pre><code>Sep 27, 2021 @ 12:20:39.3702021-09-27T06:50:39.370213Z  error   ca.liveness turns unavailable: 1 error occurred:
Sep 27, 2021 @ 12:20:39.370 * liveness: rpc error: code = Unavailable desc = all SubConns are in TransientFailure, latest connection error: connection error: desc = &quot;transport: Error while dialing dial tcp &lt;citadel-service-ip&gt;:8060: connect: cannot assign requested address&quot;
</code></pre>
<p>Want to understand the error message and the reason that could explain periodic restart.</p>

Sharat Naik
<p>@p10l is right: <code>citadel</code> was replaced by <code>Istio CA</code></p>
<p>There is a commit more than year ago: <a href="https://github.com/istio/istio.io/pull/6825" rel="nofollow noreferrer"> replace Citadel with Istio CA by istio-testing · Pull Request #6825 · istio/istio.io</a></p>
<p>Also, there are commits in documentation:</p>
<ul>
<li><a href="https://github.com/istio/istio.io/pull/9624" rel="nofollow noreferrer">Remove citadel reference by jacob-delgado · Pull Request #9624 · istio/istio.io</a></li>
<li><a href="https://github.com/istio/istio.io/pull/7872" rel="nofollow noreferrer">Remove citadel from installation instructions by myidpt · Pull Request #7872 · istio/istio.io</a></li>
<li><a href="https://github.com/istio/istio.io/pull/7398" rel="nofollow noreferrer">Best-Practices: Remove reference to Citadel. by justinpettit · Pull Request #7398 · istio/istio.io</a></li>
</ul>
<p>So, i'd suggest to update your <code>istio</code></p>
