IstioProxyVersionMismatch

This message is emitted regarding a pod when:

• Automatic sidecar injection is enabled (default enabled unless explicitlydisabled via the helm template variable sidecarInjectorWebhook.enabled)
• The pod is running in a namespace where sidecar injection is enabled (thenamespace has the label istio-injection=enabled)
• The proxy version running on the sidecar does not match the version used bythe auto-injectorThis often results after upgrading the Istio control plane; after upgradingIstio (which includes the sidecar injector), all running workloads with an Istiosidecar must be recreated to allow the new version of the sidecar to beinjected.

The easiest way to update the sidecar version is to redeploy your applicationusing your normal rollout strategy. For a Kubernetes deployment:

• If you’re using Kubernetes version 1.15 or above, you can run kubectl rolloutrestart <my-deployment> to trigger a new rollout.
• Alternatively, you can modify the deployment’s template field to force a newrollout. This is often done by adding a label like force-redeploy=<currenttimestamp> to the pod definition in the template.