解决了;
修改 /etc/kubernetes/manifests/kube-apiserver.yaml
增加 启动配置 - –admission-control=MutatingAdmissionWebhook,ValidatingAdmissionWebhook
以及修改 - –enable-admission-plugins=NamespaceLifecycle,LimitRanger,ServiceAccount,DefaultStorag
并且: kubectl edit configmap istio-sidecar-injector-1-6-10 -n istio-system -o yaml
修改: policy: enabled