Sidecar containers do not play well with k8s jobs. The job will keep running so long as the sidecar proxy is running. This is a general problem not specific to Istio (see kubernetes/kubernetes#25908). The typical workaround includes explicit terminate signaling between app and sidecar container such that the sidecar can exit when the app does.