return gvk.Sidecar, true
	case *apiistioioapinetworkingv1alpha3.Sidecar:
		return gvk.Sidecar, true
	case *k8sioapiappsv1.StatefulSet:
		return gvk.StatefulSet, true
	case *sigsk8siogatewayapiapisv1alpha2.TCPRoute:
		return gvk.TCPRoute, true
	case *sigsk8siogatewayapiapisv1alpha2.TLSRoute:
		return gvk.TLSRoute, true
	case *istioioapitelemetryv1alpha1.Telemetry:
		return gvk.Telemetry, true

var pushCdsGatewayConfig = func() sets.Set[kind.Kind] {
	s := sets.New(
		kind.VirtualService,
		kind.Gateway,

		kind.KubernetesGateway,
		kind.HTTPRoute,
		kind.TCPRoute,
		kind.TLSRoute,
		kind.GRPCRoute,
	)
	if features.JwksFetchMode != jwt.Istiod {
		s.Insert(kind.RequestAuthentication)
	}
	return s
}()

    kubectl delete -n "${NAMESPACE}" "$resource";
  done
done

# clean up Gateway API resources that may have been used
if kubectl get crd gateways.gateway.networking.k8s.io >/dev/null 2>&1; then
  protos=( httproutes gateways.gateway.networking.k8s.io )
  for proto in "${protos[@]}"; do
    for resource in $(kubectl get -n "${NAMESPACE}" "$proto" -o name); do
      kubectl delete -n "${NAMESPACE}" "$resource";
    done
  done