After sidecar injection is enabled for a namespace of a cluster, sidecars are automatically injected for pods of all workloads in the namespace. You can configure sidecars not to be injected into some workloads:
annotations: sidecar.istio.io/inject: 'false'
For more details about sidecar injection, see Automatic Sidecar Injection.