istio-init exit status

initContainerStatuses:
  - containerID: docker://3feab2c9e5ec5d1db1e133f950dd2849e1bb5bba302923794ff930d5e1a0204a
    image: otomato/istio-proxy-init:1.0.3p
    imageID: docker-pullable://otomato/istio-proxy-init@sha256:5cdee706b9e327175b201ceb6278885769a8b82cab77b5e5f3246fee93eabdac
    lastState:
      terminated:
        containerID: docker://3feab2c9e5ec5d1db1e133f950dd2849e1bb5bba302923794ff930d5e1a0204a
        exitCode: 2
        finishedAt: 2018-11-05T08:07:00Z
        reason: Error
        startedAt: 2018-11-05T08:07:00Z

istio-init.log

Environment:
------------
ENVOY_PORT=
ISTIO_INBOUND_INTERCEPTION_MODE=
ISTIO_INBOUND_TPROXY_MARK=
ISTIO_INBOUND_TPROXY_ROUTE_TABLE=
ISTIO_INBOUND_PORTS=
ISTIO_LOCAL_EXCLUDE_PORTS=
ISTIO_SERVICE_CIDR=
ISTIO_SERVICE_EXCLUDE_CIDR=

Variables:
----------
PROXY_PORT=15001
INBOUND_CAPTURE_PORT=15001
PROXY_UID=1337
INBOUND_INTERCEPTION_MODE=REDIRECT
INBOUND_TPROXY_MARK=1337
INBOUND_TPROXY_ROUTE_TABLE=133
INBOUND_PORTS_INCLUDE=
INBOUND_PORTS_EXCLUDE=
OUTBOUND_IP_RANGES_INCLUDE=100.64.0.0/10
OUTBOUND_IP_RANGES_EXCLUDE=*

+ iptables -t nat -N ISTIO_REDIRECT
+ iptables -t nat -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-port 15001
+ iptables -t nat -N ISTIO_IN_REDIRECT
+ iptables -t nat -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-port 15001
+ '[' -n '' ']'
+ iptables -t nat -N ISTIO_OUTPUT
+ iptables -t nat -A OUTPUT -p tcp -j ISTIO_OUTPUT
+ iptables -t nat -A ISTIO_OUTPUT -o lo '!' -d 127.0.0.1/32 -j ISTIO_REDIRECT
+ for uid in '${PROXY_UID}'
+ iptables -t nat -A ISTIO_OUTPUT -m owner --uid-owner 1337 -j RETURN
+ for gid in '${PROXY_GID}'
+ iptables -t nat -A ISTIO_OUTPUT -m owner --gid-owner 1337 -j RETURN
+ iptables -t nat -A ISTIO_OUTPUT -d 127.0.0.1/32 -j RETURN
+ '[' -n '*' ']'
+ for cidr in '${OUTBOUND_IP_RANGES_EXCLUDE}'
+ iptables -t nat -A ISTIO_OUTPUT -d LICENSES.txt -j RETURN
iptables v1.6.0: host/network `LICENSES.txt' not found
Try `iptables -h' or 'iptables --help' for more information.
+ dump
+ iptables-save
# Generated by iptables-save v1.6.0 on Mon Nov  5 08:09:03 2018
*mangle
:PREROUTING ACCEPT [41:5052]
:INPUT ACCEPT [41:5052]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [41:2708]
:POSTROUTING ACCEPT [41:2708]
COMMIT
# Completed on Mon Nov  5 08:09:03 2018
# Generated by iptables-save v1.6.0 on Mon Nov  5 08:09:03 2018
*raw
:PREROUTING ACCEPT [41:5052]
:OUTPUT ACCEPT [41:2708]
COMMIT
# Completed on Mon Nov  5 08:09:03 2018
# Generated by iptables-save v1.6.0 on Mon Nov  5 08:09:03 2018
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [5:378]
:POSTROUTING ACCEPT [5:378]
:ISTIO_IN_REDIRECT - [0:0]
:ISTIO_OUTPUT - [0:0]
:ISTIO_REDIRECT - [0:0]
-A OUTPUT -p tcp -j ISTIO_OUTPUT
-A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15001
-A ISTIO_OUTPUT ! -d 127.0.0.1/32 -o lo -j ISTIO_REDIRECT
-A ISTIO_OUTPUT -m owner --uid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -m owner --gid-owner 1337 -j RETURN
-A ISTIO_OUTPUT -d 127.0.0.1/32 -j RETURN
-A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001
COMMIT
# Completed on Mon Nov  5 08:09:03 2018
# Generated by iptables-save v1.6.0 on Mon Nov  5 08:09:03 2018
*filter
:INPUT ACCEPT [41:5052]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [41:2708]
COMMIT
# Completed on Mon Nov  5 08:09:03 2018