return r.Attr.GetResource() != namespaceResource && r.Attr.GetNamespace() != metav1.NamespaceNone
	case v1.ClusterScope:
		// also return true if the request is for a namespace object (namespace objects are cluster-scoped)
		return r.Attr.GetResource() == namespaceResource || r.Attr.GetNamespace() == metav1.NamespaceNone
	default:
		return false
	}
}

		return
	}

	injectedNamespaces := make(map[string]string)
	namespaceMismatchedPods := make(map[string][]string)
	namespaceResources := make(map[string]*resource.Instance)
	// Collect the list of namespaces that have istio injection enabled.
	c.ForEach(gvk.Namespace, func(r *resource.Instance) bool {
		namespaceResources[r.Metadata.FullName.String()] = r
		nsRevision, okNewInjectionLabel := r.Metadata.Labels[RevisionInjectionLabelName]