Zhonghu Xu <******@****.***> 1578586277 +0800

					Name:     "istio-sidecar-injector",
					Revision: "default",
					Reason:   "Namespace has istio-injection=disabled label, preventing injection",
				},
				{
					Name:     "istio-sidecar-injector-1-16",
					Revision: "1-16",
					Injected: false,
					Reason:   "Namespace has istio-injection=disabled label, preventing injection",
				},
				{
					Name:     "istio-sidecar-injector-deactivated",
					Revision: "default",

John Howard <******@****.***> 1682631570 -0700

The following commands assume you have
[automatic sidecar injection](https://istio.io/docs/setup/additional-setup/sidecar-injection/#automatic-sidecar-injection)
enabled in your cluster.
If not, you'll need to modify them to include
[manual sidecar injection](https://istio.io/docs/setup/additional-setup/sidecar-injection/#manual-sidecar-injection).

To run both versions of the helloworld service, use the following command:

[[service_injection]]
= Understanding Services and Service Injection

Gradle provides a number of useful services that can be used by custom Gradle types.
For example, the link:{javadocPath}/org/gradle/workers/WorkerExecutor.html[WorkerExecutor] service can be used by a task to run work in parallel, as seen in the <<worker_api.adoc#worker_api,worker API>> section.
The services are made available through _service injection_.

[[services_for_injection]]

  namespaceSelector:
    matchExpressions:
    - key: istio.io/rev
      operator: In
      values:
      - "{{ $tagName }}"
    - key: istio-injection
      operator: DoesNotExist
  objectSelector:
    matchExpressions:
    - key: sidecar.istio.io/inject
      operator: NotIn
      values:
      - "false"

upgradeNotes:
- title: Sidecar Injector Changes
  content: |
    The logic to determine if a pod requires sideacr injection or not has been updated to make use of
    new Kubernetes features. Previously, the webhook was triggered at a coarse grain level, selecting any
    pods in a namespace with a matching `istio-injection=enabled` label.

    This has two limitations:

  istioctl x check-inject deployment/details-v1

  # Check the injection status of a pod under a deployment in namespace test
  istioctl x check-inject deployment/details-v1 -n test

  # Check the injection status of label pairs in a specific namespace before actual injection 
  istioctl x check-inject -n test -l app=helloworld,version=v1
`,
		Args: func(cmd *cobra.Command, args []string) error {

		"sidecar_injection_requests_total",
		"Total number of sidecar injection requests.",
	)

	totalSuccessfulInjections = monitoring.NewSum(
		"sidecar_injection_success_total",
		"Total number of successful sidecar injection requests.",
	)

	totalFailedInjections = monitoring.NewSum(
		"sidecar_injection_failure_total",
		"Total number of failed sidecar injection requests.",
	)

	totalSkippedInjections = monitoring.NewSum(

		name     string
		pod      *corev1.Pod
		expected bool
	}{
		{
			name: "Injection disabled by annotation",
			pod: &corev1.Pod{
				ObjectMeta: metav1.ObjectMeta{
					Annotations: map[string]string{
						annotation.SidecarInject.Name: "false",
					},
				},
			},
			expected: true,
		},
		{
			name: "Injection enabled by annotation",
			pod: &corev1.Pod{
				ObjectMeta: metav1.ObjectMeta{