eature flag <code>ENABLE_ENHANCED_RESOURCE_SCOPING</code> must be set to true.</div></aside></div></p><ol><li><p>Create the first system namespace, <code>usergroup-1</code>, and deploy istiod in it:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$ kubectl create ns usergroup-1
$ kubectl label ns usergroup-1 usergroup=usergroup-1
$ istioctl install -y -f - &lt;&lt;EOF
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: usergroup-1
spec:
  profile: minimal