type><svg class="large-icon"><use xlink:href="/v1.11/img/icons.svg#callout-tip"/></svg></div><div class=content>While admission controllers are enabled by default, some Kubernetes distributions may disable them. If this is the case, follow the instructions to <a href=https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#how-do-i-turn-on-an-admission-controller>turn on admission controllers</a>.</div></aside></div><p>When you set the <code>istio-injection=enabled</code> label on a na