metadata:
  name: istio-sidecar-injector
data:
  config: |-
    policy: enabled
    neverInjectSelector:
      - matchExpressions:
        - {key: openshift.io/build.name, operator: Exists}
      - matchExpressions:
        - {key: openshift.io/deployer-pod-for.name, operator: Exists}
    template: |-
      initContainers:
...
</code></pre><p>The above statement means: Never inject on pods that have the label <code>openshift.io/build.name</code> <strong>or</strong> <code>openshift.io/deployer-pod-for.name</