When adding OSSM 3.0 to a cluster with OSSM 2.6, all Istio CRDs are updated. New CRDs contain new version v1. There are also two ValidatingWebhooks, one for OSSM 2.6 control plane and one for OSSM 3.0 control plane (Istio 1.22.3).

When trying to edit existing Istio resource (e.g. DestinationRule) in a namespace which is managed by OSSM 2.6 (the namespace is included in ServiceMeshMemberRolls spec.members) it fails with:

Error from server: admission webhook "rev.validation.istio.io" denied the request: unrecognized type networking.istio.io/v1, Kind=DestinationRule

When editing DestinationRule in a namespace managed by OSSM 3.0 (with the istio.io/rev=<revName> label) the issue is not visible.