What happened:
When I read the code, I found that for newly managed ns, all pods under the ns were directly managed without necessary checks.
For example, pods containing the label "istio.io/dataplane-mode: none" should not be managed.
ref: https://github.com/kmesh-net/kmesh/blob/main/pkg/controller/manage/manage_controller.go#L260
What you expected to happen:
How to reproduce it (as minimally and precisely as possible):
Anything else we need to know?:
Environment: