cr: create: true namespace: istio-system spec: auth: strategy: token