apiVersion: kiali.io/v1alpha1 # Kind that creates Kiali Custom Resource (Kiali Server)
kind: Kiali
metadata:
  name: kiali
  namespace: istio-system
  annotations:
    helm.sh/release-namespace: kiali-operator
spec:
  dependsOn:
    - name: kiali-operator
      namespace: kiali-operator
  auth:
    strategy: "token" # command to fetch the token to login to dashboard: $ kubectl get secret -n istio-system $(kubectl get sa kiali-service-account -n istio-system -o jsonpath='{.secrets[0].name}') -o jsonpath='{.data.token}' | base64 -d
  deployment:
    image_pull_policy: "Always"
    cluster_wide_access: false
    discovery_selectors:
      default:
      - matchLabels:
          kubernetes.io/metadata.name: bookinfo
    view_only_mode: false
    image_name: ""
    image_version: v2.6.0
  server:
    web_root: "/kiali"
  custom_secrets:
    - name: "prometheus-ca-cert"
      mount: "/prometheus-ca-cert"
  external_services:
    prometheus:
      url: "https://prometheus.internal"
      auth:
        ca_file: "/prometheus-ca-cert/ca.crt"

I get the following error in my pod:

│       Message:   2025/03/07 09:31:30 maxprocs: Leaving GOMAXPROCS=4: CPU quota undefined                                                                                                                                                                                               │
│ 2025-03-07T09:31:30Z INF Kiali: Version: v2.6.0, Commit: 8a6b00d3233b37b0962a0c958eea14e738219895, Go: 1.23.2                                                                                                                                                                          │
│ 2025-03-07T09:31:30Z INF Using authentication strategy [token]                                                                                                                                                                                                                         │
│ 2025-03-07T09:31:30Z INF Some validation errors will be ignored [KIA1301]. If these errors do occur, they will still be logged. If you think the validation errors you see are incorrect, please report them to the Kiali team if you have not done so already and provide the details │
│  of your scenario. This will keep Kiali validations strong for the whole community.                                                                                                                                                                                                    │
│ 2025-03-07T09:31:30Z INF Initializing Kiali Cache                                                                                                                                                                                                                                      │
│ 2025-03-07T09:31:30Z INF [Kiali Cache] Waiting for namespace-scoped for namespace: istio-system cache to sync                                                                                                                                                                          │
│ 2025-03-07T09:31:31Z INF [Kiali Cache] Started                                                                                                                                                                                                                                         │
│ 2025-03-07T09:31:31Z INF [Kiali Cache] Kube cache is active for cluster: [Kubernetes]                                                                                                                                                                                                  │
│ 2025-03-07T09:31:31Z INF [Kiali Cache] Unable to list webhooks for cluster [Kubernetes]. Give Kiali permission to read 'mutatingwebhookconfigurations'.                                                                                                                                │
│ 2025-03-07T09:31:31Z INF [Prom Cache] Enabled                                                                                                                                                                                                                                          │
│ 2025-03-07T09:31:31Z FTL Error creating Prometheus client: failed to get root CA certificates: open /prometheus-ca-cert/ca.crt: no such file or directory