Namespace: "testns",
					},
					"pod3.headless-svc.testns.svc.cluster.local": {
						Ips:       []string{"19.6.7.8"},
						Registry:  "Kubernetes",
						Shortname: "pod3.headless-svc",
						Namespace: "testns",
					},
					"pod4.headless-svc.testns.svc.cluster.local": {
						Ips:       []string{"9.16.7.8"},
						Registry:  "Kubernetes",
						Shortname: "pod4.headless-svc",
						Namespace: "testns",
					},

metadata:
  name: websocket
  namespace: testns
spec:
  host: websocket.test.istio.io
  subsets:
    - name: v1
      labels:
        version: v1


---

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: websocket-route
  namespace: testns
spec:
  hosts:
    - websocket.test.istio.io
  http:
    - match:
      - headers:
          testwebsocket:

metadata:
  name: fault
  namespace: testns
spec:
  host: c-weighted.extsvc.com
  subsets:
    - name: v1
      labels:
        version: v1
    - name: v2
      labels:
        version: v2

---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: fault
  namespace: testns
spec:
  hosts:
    - fault.test.istio.io
  http:
    - match:
      - headers:

	corev1 "k8s.io/api/core/v1"

	"istio.io/istio/pilot/pkg/features"
	"istio.io/istio/pilot/pkg/model"
	"istio.io/istio/pkg/test"
	"istio.io/istio/pkg/test/util/assert"
	"istio.io/istio/pkg/workloadapi"
)

func TestAmbientIndex_ServiceEntry(t *testing.T) {
	s := newAmbientTestServer(t, testC, testNW)

	// test code path where service entry creates a workload entry via `ServiceEntry.endpoints`
	// and the inlined WE has a port override

			kubelet_volume_stats_inodes{namespace="testns",persistentvolumeclaim="testpvc"} 655360
			kubelet_volume_stats_inodes_free{namespace="testns",persistentvolumeclaim="testpvc"} 655344
			kubelet_volume_stats_inodes_used{namespace="testns",persistentvolumeclaim="testpvc"} 16
			kubelet_volume_stats_used_bytes{namespace="testns",persistentvolumeclaim="testpvc"} 4.21789696e+09

metadata:
  name: appendh
  namespace: testns
spec:
   hosts:
   - appendh.test.istio.io
   ports:
   - number: 80
     name: http
     protocol: HTTP
   resolution: STATIC
   endpoints:
    - address: 127.0.0.2
      ports:
        http: 7072
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: appendh-route
  namespace: testns
spec:
  hosts:

kind: ServiceEntry
metadata:
  name: byon
  namespace: testns
spec:
   hosts:
   - byon.test.istio.io
   ports:
   - number: 80
     name: http
     protocol: HTTP
   resolution: STATIC
   endpoints:
    - address: 127.0.0.2
      ports:
        http: 7072
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: byon
  namespace: testns
spec:
  hosts:
    - mybyon.test.istio.io

kind: DestinationRule
metadata:
  name: regex
  namespace: testns
spec:
  host: regex.extsvc.com
  subsets:
    - name: v1
      labels:
        version: v1
    - name: v2
      labels:
        version: v2
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: regex-route
  namespace: testns
spec:
  hosts:
    - regex.extsvc.com
  http:
    - match:

	assert.Error(t, err)
	assert.Equal(t, strings.Contains(err.Error(), fmt.Sprintf("unable to push CNI event, error was %d", http.StatusInternalServerError)), true)
}

func TestPushCNIAddEventGoodPayload(t *testing.T) {
	testPod := "testpod"
	testNS := "testns"

kind: ServiceEntry
metadata:
  name: external-svc-extsvc
  namespace: testns
spec:
   hosts:
   - external.extsvc.com
   ports:
   - number: 1443
     name: extsvc-http
     protocol: HTTP # not HTTPS.
   resolution: DNS

---

apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
 name: external-service-1
 namespace: testns
spec:
 host: external.extsvc.com
# BUG: crash envoy