See: https://github.com/kiali/kiali/pull/821

This better re-organizes Kiali's clusterrole yaml file and make sure it uses the latest "extension" group (for why, see https://github.com/kubernetes/kubernetes/issues/61430). The initial reason for this change was due to people having problems when cluster roles were using the obsolete api group - for details on that, see https://github.com/istio/istio/issues/10883)

Maistra should change its kiali clusterrole.yaml to reflect this change.