ning the namespace of the desired Citadel instance</p></li><li><p><code>ca.istio.io/override</code> namespace label: <em>boolean valued</em> label which overrides all other configurations and forces all Citadel instances either to target or ignore a namespace</p></li><li><p><a href=/v1.4/docs/reference/config/installation-options/#security-options><code>enableNamespacesByDefault</code> security configuration</a>: default behavior if no labels are found on the <code>ServiceAccount</code>&rsquo;s namespace</p