// Create a ServiceEntry to allow apps in this namespace to talk to the external service.
		if d.External.Namespace != nil {
			DeployExternalServiceEntry(cfg, ns, d.External.Namespace, false)
		}
	}

	return cfg.Apply(apply.NoCleanup)
}

func DeployExternalServiceEntry(cfg config.Factory, deployedNamespace, externalNamespace namespace.Instance, manuallyAllocate bool) config.Plan {

					if strings.HasPrefix(hn, "x-envoy-peer-metadata") {
						return fmt.Errorf("got unexpected proxy header: %v=%v", k, v)
					}
				}
				return nil
			})

			cdeployment.DeployExternalServiceEntry(t.ConfigIstio(), ns, apps.External.Namespace, false).
				ApplyOrFail(t, apply.CleanupConditionally)
			instance.CallOrFail(t, echo.CallOptions{
				Address: apps.External.All[0].Address(),

	apps.Mesh = inMesh.GetMatches(echos)
	apps.MeshExternal = match.Not(inMesh).GetMatches(echos)

	// TODO(https://github.com/istio/istio/issues/51083) remove manually allocate
	if err := cdeployment.DeployExternalServiceEntry(t.ConfigIstio(), apps.Namespace, apps.ExternalNamespace, true).
		Apply(apply.CleanupConditionally); err != nil {
		return err
	}

	if apps.WaypointProxies == nil {