All upstream CRD's have the maistra-version label, making it easy to figure out which CRD's belong to service mesh.

Operator should add a label to its CRD's, so that we can easily figure out what CRD's belong to istio-operator (easily queryable with oc get crd -l <label>