[Bug] mesh proxyless communicate with istio generate cert failed.

[yyi]

Pre-check

• I am sure that all the content I provide is in English.

Search before asking

• I had searched in the issues and found no similar issues.

Apache Dubbo Component

Java SDK (apache/dubbo)

Dubbo Version

dubbo java 3.2.9、 java 17、 k8s 1.27.6、 istio 1.23.5 、spring boot 3.3.9

Steps to reproduce this issue

proxless mesh，pod start fail ：
ERROR org.apache.dubbo.registry.xds.istio.IstioCitadelCertificateSigner - [DUBBO] Receive error message from Istio Citadel grpc stub., dubbo version: 3.2.9, current host: 10.244.111.45, error code: 1-28. This may be caused by , go to https://dubbo.apache.org/faq/1/28 to find instructions.
io.grpc.StatusRuntimeException: UNAUTHENTICATED: request authenticate failure
at io.grpc.Status.asRuntimeException(Status.java:537) ~[grpc-api-1.59.0.jar!/:1.59.0]
at io.grpc.stub.ClientCalls$StreamObserverToCallListenerAdapter.onClose(ClientCalls.java:481) [grpc-stub-1.59.0.jar!/:1.59.0]
at io.grpc.internal.DelayedClientCall$DelayedListener$3.run(DelayedClientCall.java:489) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.DelayedClientCall$DelayedListener.delayOrExecute(DelayedClientCall.java:453) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.DelayedClientCall$DelayedListener.onClose(DelayedClientCall.java:486) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.ClientCallImpl.closeObserver(ClientCallImpl.java:574) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.ClientCallImpl.access$300(ClientCallImpl.java:72) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.ClientCallImpl$ClientStreamListenerImpl$1StreamClosed.runInternal(ClientCallImpl.java:742) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.ClientCallImpl$ClientStreamListenerImpl$1StreamClosed.runInContext(ClientCallImpl.java:723) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.ContextRunnable.run(ContextRunnable.java:37) [grpc-core-1.59.0.jar!/:1.59.0]
at io.grpc.internal.SerializingExecutor.run(SerializingExecutor.java:133) [grpc-core-1.59.0.jar!/:1.59.0]
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?]
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?]
at java.base/java.lang.Thread.run(Thread.java:833) [?:?]

What you expected to happen

app start successfully

Anything else

No response

Are you willing to submit a pull request to fix on your own?

• Yes I am willing to submit a pull request on my own!

Code of Conduct

• I agree to follow this project's Code of Conduct

[AlbumenJ]

This feature is still in developing and expected to be release officially late this year