√ pods do not use host networking √ pods do not have a 3rd party proxy or initContainer already injected √ pods are not annotated to disable injection √ at least one resource injected ‼ deployment/web uses "protocol: UDP" deployment "web" injected