Why Cert Manager (and Lets encrypt) integrating with ISTIO fails to complete HTTP01 challenge

Question

I am trying to integrate ISTIO with cert manager following the docs here: https://istio.io/latest/docs/ops/integrations/certmanager/

But I got the error saying: