When you create two instances of IstioCNI, one of two things can happen:

• if both instances use the same namespace, then the controller falls into an infinite loop
• if two different namespaces are used, the second IstioCNI reconciliation will fail because it won't be able to create the istio-cni ClusterRole, since it will already exist

For now, IstioCNI must be a singleton. To achieve this, we should ensure that the IstioCNI name is always "default".