I was trying to create a local kind cluster using kind to test out the istio ambient mode. Im using calico CNI. Trying to do this setup on a linux VM. Facing issues, Istio-cni-node & Ztunnel are crashing.

Istio-cni-node Logs

2025-03-29T05:00:54.063700Z info    cni-agent   configuration requires updates, (re)writing CNI config file at "": CNI config file "" preempted by "/host/etc/cni/net.d/10-calico.conflist"
2025-03-29T05:00:54.063827Z error   cni-agent   installer failed: create CNI config file: watcher create: too many open files
2025-03-29T05:00:54.063834Z info    cni-agent   cleaning up CNI installation
2025-03-29T05:00:54.063864Z info    cni-agent   removing Istio CNI kubeconfig file: /var/run/istio-cni/istio-cni-kubeconfig
2025-03-29T05:00:54.063909Z info    cni-agent   removing binary: /host/opt/cni/bin/istio-cni
2025-03-29T05:00:54.063979Z info    cni-agent   CNI ambient server terminating, cleaning up node net rules
2025-03-29T05:00:54.064033Z info    Running command (without lock): iptables-nft -t nat -D POSTROUTING -j ISTIO_POSTRT
2025-03-29T05:00:54.091554Z info    Running command (without lock): iptables-nft -t nat -F ISTIO_POSTRT
2025-03-29T05:00:54.115232Z info    Running command (without lock): iptables-nft -t nat -X ISTIO_POSTRT
2025-03-29T05:00:54.134967Z info    Running command (without lock): ip6tables-nft -t nat -D POSTROUTING -j ISTIO_POSTRT
2025-03-29T05:00:54.164893Z info    Running command (without lock): ip6tables-nft -t nat -F ISTIO_POSTRT
2025-03-29T05:00:54.196233Z info    Running command (without lock): ip6tables-nft -t nat -X ISTIO_POSTRT
Error: create CNI config file: watcher create: too many open files