Force Istio On Istio-Integrated Packages
We should create a constraint that forces pods in namespaces that have the istio-injection: enabled
to not have the annotation sidecar.istio.io/inject: false
annotation that would allow pods in that namespace to avoid being part of the service mesh unless they are specifically added to the constraint.