title: Internal error occurred: failed calling webhook "validation.istio.io"
body: <p>Playing around with GCP Anthos, I installed Anthos 1.11 on the GKE cluster and installed the Online Boutique application it was working as expected. Then tried to upgrade to Anthos 1.12, after upgrading was able to inject the new envoy sidecar into deployments.
  Problem is when I try creating a Service Entry as below :</p>
  <pre><code>apiVersion: networking.istio.io/v1alpha3
  kind: ServiceEntry
  metadata: # kpt-merge: /allow-egress-googleapis
    name: allow-egress-googleapis
  spec:
    hosts:
    - &quot;accounts.google.com&quot; # Used to get token
    - &quot;*.googleapis.com&quot;
    ports:
    - number: 80
      protocol: HTTP
      name: http
    - number: 443
      protocol: HTTPS
      name: https
  ---
  apiVersion: networking.istio.io/v1alpha3
  kind: ServiceEntry
  metadata: # kpt-merge: /allow-egress-google-metadata
    name: allow-egress-google-metadata
  spec:
    hosts:
    - metadata.google.internal
    addresses:
    - 169.254.169.254 # GCE metadata server
    ports:
    - number: 80
      name: http
      protocol: HTTP
    - number: 443
      name: https
      protocol: HTTPS
  </code></pre>
  <p>I run into the below error:</p>
  <pre><code>Error from server (InternalError): error when creating &quot;online-boutique/istio-manifests/allow-egress-googleapis.yaml&quot;: Internal error occurred: failed calling webhook &quot;validation.istio.io&quot;: Post &quot;https://istiod-asm-1118-0.istio-system.svc:443/validate?timeout=10s&quot;: service &quot;istiod-asm-1118-0&quot; not found
  Error from server (InternalError): error when creating &quot;online-boutique/istio-manifests/allow-egress-googleapis.yaml&quot;: Internal error occurred: failed calling webhook &quot;validation.istio.io&quot;: Post &quot;https://istiod-asm-1118-0.istio-system.svc:443/validate?timeout=10s&quot;: service &quot;istiod-asm-1118-0&quot; not found
  </code></pre>
  <p>Not sure why its picking the older version which was cleaned up, i dont explicitly mention the asm version, how is it picking the old version ? How can i resolve this ?</p>
  <p>Online Boutique application deployed as in <a href="https://cloud.google.com/service-mesh/docs/onlineboutique-install-kpt#using-ingress-gateway" rel="nofollow noreferrer">https://cloud.google.com/service-mesh/docs/onlineboutique-install-kpt#using-ingress-gateway</a></p>
  <p>thank you !</p>