</code> or <code>*</code> in the list of capabilities of one of the allowed
policies for your service account, your pods have permission to run the Istio init containers.
Otherwise, you will need to <a href=https://kubernetes.io/docs/concepts/policy/pod-security-policy/#authorizing-policies>provide the permission</a>.</p></li><li><p><strong>Pod labels</strong>: We recommend explicitly declaring pods with an application identifier and version by using a pod label.
These labels add contextual information to t