// configured to have the same Mesh ID value. If an existing cluster 'joins' a
  // multicluster mesh, it will need to be migrated to the new mesh ID. Details
  // of migration TBD, and it may be a disruptive operation to change the Mesh
  // ID post-install.
  //
  // If the mesh admin does not specify a value, Istio will use the value of the

	// behavior, but for compatibility with the Console, we currently allow it.
	//
	// TODO:
	//
	// 1. fix console behavior and allow this inheritance for service accounts
	// created before a certain (TBD) future date.
	//
	// 2. do not allow empty statement policies for service accounts.
	if subPolicy.Version == "" && subPolicy.Statements == nil && subPolicy.ID == "" {
		hasSessionPolicy = false
		return
	}