Istio sidecar injection enabled but Pods not getting sidecar

Check the namespace label (istio-injection: enabled). Also check whether there is an annotation on the Pod spec disabling injection (sidecar.istio.io/inject: 'false'). New Pods pick up the setting but existing Pods need deletion and recreation.