Istio 1.14.5, sidecar injection fails due invalid certificate - istio

Question

I'm using Istio 1.14.5 in my AWS EKS (1.21.14-eks-fb459a0).
I'm injecting my istio sidecar with:
istioctl kube-inject -f my-deployment.yaml | kubectl apply -f -
But, when I scaleout my deployment to 1 (create ReplicaSet), I'm getting this event in the ReplicaSet:
Type Reason Age From Message
---- ------ ---- ---- -------
Warning FailedCreate 72s (x17 over 6m40s) replicaset-controller Error creating: Internal error occurred: failed calling webhook "object.sidecar-injector.istio.io": Post "https://istiod.istio-system.svc:443/inject?timeout=10s": Address is not allowed
I'm already injecting the sidecar in another namespaces withou problems.
Using anothe POD in that namespace, accessing the shell I tried to perform a request to that URL with curl -v:
$ curl https://istiod.istio-system.svc:443 -v
* TCP_NODELAY set
* Expire in 200 ms for 4 (transfer 0x55de240c1f50)
* Connected to istiod.istio-system.svc (10.100.100.235) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (OUT), TLS alert, unknown CA (560):
* SSL certificate problem: unable to get local issuer certificate
* Closing connection 0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
How can I solve this? What is the source of this problem?