https://istio.io/docs/setup/kubernetes/sidecar-injection.html#prerequisites for IBM CCS need to be updated for k8s 1.9 to enable support for mutating webhooks.
$ kubectl api-versions | grep admissionregistration.k8s.io/v1beta1
admissionregistration.k8s.io/v1beta1
See https://archive.istio.io/v0.4/docs/setup/kubernetes/sidecar-injection#prerequisites for previous 0.4.0 doc version.