We introduced the command-line option enableIngressClassName to istiod to prevent it from listing ingressclasses, since that would require cluster-scoped privileges which we don't want istiod to have. After rebasing to Istio 1.9, istiod tries to list ingressclasses even if the option is set to false. We should figure out why that is so and fix it.