connect sidecar gets "unauthenticated: ACL not found" while replacing node in AKS cluster

I am facing a problem when the pod starts up the envoy sidecar fails with the error. This happens while performing maintenance over AKS nodes where I need to move the connect inject enable pods to newer nodes.

[2023-10-03 05:44:33.997][1][warning][config] [./source/common/config/grpc_stream.h:160] DeltaAggregatedResources gRPC config stream closed: 16, unauthenticated: ACL not found

A similar issue is being discussed in Nomad as well https://github.com/hashicorp/nomad/issues/9785

Start by reproducing the Envoy sidecar failure during AKS node replacement and capture the Consul and Envoy logs around the ACL error. Compare the behavior with the linked Nomad issue and trace how the connect-injected pod authenticates after moving nodes. Done means the cause is identified and a verified resolution or actionable diagnosis is recorded.

Written by the indexing model from the issue text.