s.wleXdsName("name3"))

	s.deleteService(t, "waypoint-ns")
	s.assertEvent(t, s.podXdsName("waypoint-ns-pod"),
		s.svcXdsName("waypoint-ns"))

	s.deleteWorkloadEntry(t, "name3")
	s.assertEvent(t, s.wleXdsName("name3"))
	s.deleteWorkloadEntry(t, "name2")
	s.assertEvent(t, s.wleXdsName("name2"))

	s.addPolicy(t, "global", "istio-system", nil, gvk.AuthorizationPolicy, nil)

			Namespace:   namespace,
		},
		Spec: v1alpha3.WorkloadEntry{
			Address:        ip,
			ServiceAccount: saName,
			Labels:         labels,
		},
	}
}

func (s *ambientTestServer) deleteWorkloadEntry(t *testing.T, name string) {
	t.Helper()
	s.we.Delete(name, "ns1")
}

func (s *ambientTestServer) addServiceEntry(t *testing.T,
	hostStr string,
	addresses []string,
	name,
	ns string,