I’ve updated the sidecar-injector webhook to includes also the ObjectSelector so it loos like this:
name: sidecar-injector.istio.io namespaceSelector: matchLabels: istio-injection: enabled objectSelector: matchLabels: sidecar.istio.io/inject: "true" reinvocationPolicy: Never
but still deployments with this label (or annotation) does not gets injected.
the namespace does not includes the istio-injection label, and policy is enabled.
what am i missing?
cant i chose to inject automatically only on workloads i want? (to be able to enroll to istio gradually)