e    3d
kube-public    Active    18d
kube-system    Active    18d
</code></pre><p>The <code>namespaceSelector</code> for opt-out will look like the following:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl get mutatingwebhookconfiguration istio-sidecar-injector -o yaml | grep &#34;namespaceSelector:&#34; -A5
  namespaceSelector:
    matchExpressions:
    - key: istio-injection
      operator: NotIn
      values:
      - disabled
  rules:
  - apiGroups:
    - &#34;&#34;
</c