assert.Equal(t,
		s.lookup(s.seIPXdsName("se1", "127.0.0.1"))[0].GetWorkload().GetAuthorizationPolicies(),
		nil)
	assert.Equal(t,
		s.lookup(s.seIPXdsName("se1", "127.0.0.2"))[0].GetWorkload().GetAuthorizationPolicies(),
		nil)

	s.deleteServiceEntry(t, "se1", testNS)
	s.assertWorkloads(t, "", workloadapi.WorkloadStatus_HEALTHY) // Asserting no WE residual
}

			},
		},
	}
	ses := []config.Config{se1, se2, se3}

	wle := &networking.WorkloadEntry{
		Address: "2.3.4.5",
		Labels: map[string]string{
			"app":     "foo",
			"version": "v1",
		},
		Ports: map[string]uint32{
			"http-number":  8081,
			"http2-number": 8088,
		},
	}

	expected := map[types.NamespacedName]*config.Config{
		{Namespace: "default", Name: "se-1"}: &se1,
		{Namespace: "default", Name: "se-3"}: &se3,

	"istio.io/istio/pilot/pkg/model"
	"istio.io/istio/pilot/pkg/simulation"
	"istio.io/istio/pilot/test/xds"
)

const se = `
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: se1
spec:
  hosts:
  - blah.somedomain
  addresses:
  - %s
  ports:
  - number: 9999
    name: TCP-9999
    protocol: TCP
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:

	// Regression test for https://github.com/istio/istio/issues/50478
	s := xds.NewFakeDiscoveryServer(t, xds.FakeOptions{ConfigString: `apiVersion: networking.istio.io/v1beta1
kind: ServiceEntry
metadata:
  name: se1
spec:
  hosts:
  - example.com
  ports:
  - name: port1
    number: 80
    protocol: HTTP
  resolution: DNS
---
apiVersion: networking.istio.io/v1beta1
kind: ServiceEntry
metadata:

	createConfigs([]*config.Config{wle, se1}, store, t)
	events.WaitOrFail(t, "service")
	expectServiceInstances(t, sd, se1, 0, expected)

	// Create another identical SE (different name) gives us duplicate instances
	// Arguable whether this is correct or not...
	createConfigs([]*config.Config{se2}, store, t)
	events.WaitOrFail(t, "service")
	expectServiceInstances(t, sd, se1, 0, append(slices.Clone(expected), expected...))