><p>Check the default injection policy in the <code>istio-sidecar-injector configmap</code>.</p><pre><code class=language-bash data-expandlinks=true data-outputis=yaml data-repo=istio>$ kubectl -n istio-system get configmap istio-sidecar-injector -o jsonpath=&#39;{.data.config}&#39; | grep policy:
policy: enabled
</code></pre><p>Allowed policy values are <code>disabled</code> and <code>enabled</code>. The default policy
only applies if the webhook’s <code>namespaceSelector</code> matches the target
namesp