uo;s namespace is labeled properly and (re) label accordingly, e.g.</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl label namespace istio-system istio-injection=disabled --overwrite
</code></pre><p>(repeat for all namespaces in which the injection webhook should be invoked for new pods)</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl label namespace default istio-injection=enabled --overwrite
</code></pre></li><li><p>Check default policy</p