Maistra 0.7.0 TC26 failed in enabling citadel health check.
I run the Maistra 0.7.0 on a remote OCP 3.11 cluster. TC26 enabling citadel health check:
https://preliminary.istio.io/docs/tasks/security/health-check/

The test can not get the "CSR successfully signed" log in citadel.

logs from "oc logs `oc get po -n istio-system | grep istio-citadel | awk '

{print $1}

'` -n istio-system

2019-01-28T20:52:51.351486Z info parsed scheme: ""
2019-01-28T20:52:51.351540Z info scheme "" not registered, fallback to default scheme
2019-01-28T20:52:51.351884Z info ccResolverWrapper: sending new addresses to cc: [

{istio-citadel.istio-system.svc.cluster.local:8060 0 <nil>}

]
2019-01-28T20:52:51.351930Z info ClientConn switching balancer to "pick_first"
2019-01-28T20:52:51.352065Z info pickfirstBalancer: HandleSubConnStateChange: 0xc00052ab10, CONNECTING
2019-01-28T20:52:51.352078Z info blockingPicker: the picked transport is not ready, loop back to repick
2019-01-28T20:52:51.936079Z info pickfirstBalancer: HandleSubConnStateChange: 0xc00052ab10, READY
2019-01-28T20:52:51.936647Z info Authentication failed: <nil>
2019-01-28T20:53:01.389633Z info parsed scheme: ""
2019-01-28T20:53:01.389702Z info scheme "" not registered, fallback to default scheme
2019-01-28T20:53:01.389844Z info ccResolverWrapper: sending new addresses to cc: [

{istio-citadel.istio-system.svc.cluster.local:8060 0 <nil>}

]
2019-01-28T20:53:01.389887Z info ClientConn switching balancer to "pick_first"
2019-01-28T20:53:01.389978Z info pickfirstBalancer: HandleSubConnStateChange: 0xc00052a510, CONNECTING
2019-01-28T20:53:01.390015Z info blockingPicker: the picked transport is not ready, loop back to repick
2019-01-28T20:53:02.199221Z info pickfirstBalancer: HandleSubConnStateChange: 0xc00052a510, READY
2019-01-28T20:53:02.199735Z info Authentication failed: <nil>