
  revision: usergroup-1
  meshConfig:
    discoverySelectors:
      - matchLabels:
          usergroup: usergroup-1
  values:
    global:
      istioNamespace: usergroup-1
    pilot:
      env:
        ENABLE_ENHANCED_RESOURCE_SCOPING: true
EOF
</code></pre></li><li><p>Create the second system namespace, <code>usergroup-2</code>, and deploy istiod in it:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl create ns usergroup-2
$ kubectl label ns usergroup-2 usergroup=usergroup