For upgrade from 2.x to 3.x it's necessary to run both versions in parallel. When running OSSM 2.5 and trying to install IstioCNI resource from 3.0, the installation is failing because of conflicts in istio-cni ClusterRoleBinding and istio-cni ServiceAccount.

Based on discussion: https://redhat-internal.slack.com/archives/C04LPNBPM6W/p1706789645428389

DoDs:

1. istio-cni ?fully replaced? with ossm-cni in release 2.6 (as 2.3 will EOL)
2. istio-cni is not created during OSSM installation
3. istio-cni not created during resource reconciliation once were deleted if existed