When your DestinationRule isn't applying, the usual suspects are host name mismatches, missing pod labels for subsets, namespace scoping issues, or conflicting DestinationRules. Use istioctl ...