r-injector</code> configuration map using the <code>kubectl apply</code> command.
After updating the <code>istio-sidecar-injector</code> configuration, it affects all
future application pod deployments.</p><div><aside class="callout warning"><div class=type><svg class="large-icon"><use xlink:href="/v1.2/img/icons.svg#callout-warning"/></svg></div><div class=content>Unlike <a href=#envoy-passthrough-to-external-services>Envoy passthrough to external services</a>,
which uses the <code>ALLOW_ANY</code> traffic