fixes

cluster-resources/cert-manager-namespace.yaml

@@ -5,5 +5,3 @@ apiVersion: v1
 kind: Namespace
 metadata:
   name: cert-manager
-  labels:
-    istio-injection: disabled

cluster-resources/secrets-namespace.yaml

@@ -0,0 +1,7 @@
+---
+# Disable Istio sidecar injection for cert-manager namespace
+# This is required for cert-manager to function properly with Istio
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: secrets