log.Errorf("In-cluster analysis has failed: %s", err)
			return
		}
		// reorganize messages to map
		index := map[status.Resource]diag.Messages{}
		for _, m := range res.Messages {
			key := status.ResourceFromMetadata(m.Resource.Metadata)
			index[key] = append(index[key], m)
		}
		// if we previously had a message that has been removed, ensure it is removed
		// TODO: this creates a state destruction problem when istiod crashes

	found, _ := collections.All.FindByGroupVersionResource(r.GroupVersionResource)
	return config.Key(
		found.Group(), found.Version(), found.Kind(),
		r.Name, r.Namespace)
}

func ResourceFromMetadata(i resource.Metadata) Resource {
	return Resource{
		GroupVersionResource: i.Schema.GroupVersionResource(),
		Namespace:            i.FullName.Namespace.String(),
		Name:                 i.FullName.Name.String(),