ver the default <code>policy</code> was
to force the sidecar to be injected:</p><pre><code class=language-bash data-expandlinks=true data-outputis=yaml data-repo=istio>$ kubectl get deployment sleep -o yaml | grep &#34;sidecar.istio.io/inject:&#34; -C3
template:
  metadata:
    annotations:
      sidecar.istio.io/inject: &#34;true&#34;
    labels:
      app: sleep
</code></pre></li></ol><h2 id=pods-cannot-be-created-at-all>Pods cannot be created at all</h2><p>Run <code>kubectl describe -n namespace deployme