I'm installing the latest nightly build from "quay.io/maistra/servicemesh-olm-cs:latest-2.0-qe" catalog.

Currently it's installing following operator:

"quay.io/maistra/istio-rhel8-operator@sha256:4959421d38132e5ebe07202af74ff81d079bd62247dce234e367ffaeb1c192b7"

Repro steps:

1. install OCP 4.5 cluster
2. add catalog source pointing to "quay.io/maistra/servicemesh-olm-cs:latest-2.0-qe" image
3. create istio-system NS and install operator from created catalog source
4. create following SMCP in istio-system NS

apiVersion: maistra.io/v2
kind: ServiceMeshControlPlane
metadata:
  name: install-istio-system
spec:
  version: v2.0
  security:
    dataPlane:
      mtls: true
      automtls: true
    controlPlane:
      mtls: true
  tracing:
    type: None
  addons:
    kiali:
      name: kiali
      enabled: false

Result:

ReconcileError
Error processing component mesh-config: Internal error occurred: failed calling webhook "validation.istio.io": Post https://istiod-install-istio-system.istio-system.svc:443/validate?timeout=30s: x509: certificate signed by unknown authority: error: Internal error occurred: failed calling webhook "validation.istio.io": Post https://istiod-install-istio-system.istio-system.svc:443/validate?timeout=30s: x509: certificate signed by unknown authority

Istio operator log is attached