helm upgrade --create-namespace --install --wait k0rdent-istio ./charts/k0rdent-istio \
-n istio-system \
--set k0rdent-istio.repo.spec.url=oci://kcm-local-registry:5000/charts \
--set k0rdent-istio.repo.spec.type=oci \
--set operator.image.registry=docker.io/library \
--set operator.image.repository=istio-operator-controller \
--set "istiod.meshConfig.extensionProviders[0].name=otel-tracing" \
--set "istiod.meshConfig.extensionProviders[0].opentelemetry.port=4317" \
--set "istiod.meshConfig.extensionProviders[0].opentelemetry.service=kof-collectors-daemon-collector.kof.svc.cluster.local" \
--set-json 'gateway.resource.spec.servers[0]={"port":{"number":15443,"name":"tls","protocol":"TLS"},"tls":{"mode":"AUTO_PASSTHROUGH"},"hosts":["{clusterName}-vmauth.kof.svc.cluster.local"]}'
Error: UPGRADE FAILED: conflict occurred while applying object /istiod-default-validator admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration: Apply failed with 1 conflict: conflict with "pilot-discovery" using admissionregistration.k8s.io/v1: .webhooks[name="validation.istio.io"].failurePolicy && conflict occurred while applying object /istio-validator-istio-system admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration: Apply failed with 1 conflict: conflict with "pilot-discovery" using admissionregistration.k8s.io/v1: .webhooks[name="rev.validation.istio.io"].failurePolicy
Running this twice leads to issue