You have a GKE cluster with Istio service mesh deployed. One of your services, Service A, cannot invoke another service, Service B, over HTTPS. Both services have Istio sidecars and you have confirmed that Service A's requests to Service B are leaving the sidecar. What could be the cause of this issue?