root@deploy1002:/srv/deployment-charts/helmfile.d/admin_ng# helmfile -e dse-k8s-eqiad -l name=istio-gateways-networkpolicies sync
helmfile.yaml: basePath=.
Affected releases are:
  istio-gateways-networkpolicies (wmf-stable/raw) UPDATED

Upgrading release=istio-gateways-networkpolicies, chart=wmf-stable/raw
Release "istio-gateways-networkpolicies" does not exist. Installing it now.
NAME: istio-gateways-networkpolicies
LAST DEPLOYED: Mon Sep  5 14:29:57 2022
NAMESPACE: istio-system
STATUS: deployed
REVISION: 1
TEST SUITE: None

Listing releases matching ^istio-gateways-networkpolicies$
istio-gateways-networkpolicies  istio-system    1               2022-09-05 14:29:57.801232075 +0000 UTC deployed        raw-0.3.0       0.2.3


UPDATED RELEASES:
NAME                             CHART            VERSION
istio-gateways-networkpolicies   wmf-stable/raw     0.3.0

helmfile.yaml: basePath=.
root@deploy1002:/srv/deployment-charts/helmfile.d/admin_ng# helmfile -e dse-k8s-eqiad -l name=istio-proxy-settings sync
helmfile.yaml: basePath=.
Affected releases are:
  istio-proxy-settings (wmf-stable/raw) UPDATED

Upgrading release=istio-proxy-settings, chart=wmf-stable/raw
Release "istio-proxy-settings" does not exist. Installing it now.
NAME: istio-proxy-settings
LAST DEPLOYED: Mon Sep  5 14:30:27 2022
NAMESPACE: istio-system
STATUS: deployed
REVISION: 1
TEST SUITE: None

Listing releases matching ^istio-proxy-settings$
istio-proxy-settings    istio-system    1               2022-09-05 14:30:27.496648357 +0000 UTC deployed        raw-0.3.0       0.2.3


UPDATED RELEASES:
NAME                   CHART            VERSION
istio-proxy-settings   wmf-stable/raw     0.3.0

helmfile.yaml: basePath=.

root@deploy1002:~# istioctl-1.9.5 manifest apply -f /srv/deployment-charts/custom_deploy.d/istio/dse-k8s/config.yaml

The Kubernetes version v1.16.15 is not supported by Istio 1.9.5. The minimum supported Kubernetes version is 1.17.
Proceeding with the installation, but you might experience problems. See https://istio.io/latest/docs/setup/platform-setup/ for a list of supported versions.

Detected that your cluster does not support third party JWT authentication. Falling back to less secure first party JWT. See https://istio.io/v1.9/docs/ops/best-practices/security/#configure-third-party-service-account-tokens for details.
This will install the Istio 1.9.5  profile with ["Istio core" "Istiod" "CNI" "Ingress gateways"] components into the cluster. Proceed? (y/N) y
✔ Istio core installed
✔ Istiod installed
✔ CNI installed
✔ Ingress gateways installed
✔ Installation complete
root@deploy1002:~#

root@deploy1002:/srv/deployment-charts/helmfile.d/admin_ng# helmfile -e dse-k8s-eqiad -l name=cert-manager-networkpolicies sync
root@deploy1002:/srv/deployment-charts/helmfile.d/admin_ng# helmfile -e dse-k8s-eqiad -l name=cert-manager sync
root@deploy1002:/srv/deployment-charts/helmfile.d/admin_ng# helmfile -e dse-k8s-eqiad -l name=cfssl-issuer-crds sync

root@deploy1002:/srv/deployment-charts/helmfile.d/admin_ng# helmfile -e dse-k8s-eqiad -l name=cfssl-issuer sync

STDERR:
  Error: execution error at (cfssl-issuer/templates/secret.yaml:13:10): authSecret needs a key