Installed istio in default namespace, which I also have other services running, including headless service. Headless service has no cluster IP, thus istio proxy sidecar produced error:

03:40:00.800][32][critical][main] error initializing configuration '/etc/envoy/envoy-rev0.json': invalid ipv4 address ''

Should at least ignore headless service.