There are a couple of issues found: 1. typo on DestinationRule name 1. default istio gateway has incorrect path to TLS secrets.