metricWebhookPatchFailures = monitoring.NewSum(
		"webhook_patch_failures_total",
		"Webhook patching total failures",
	)
)

const (
	// webhook patching failure reasons
	reasonWrongRevision         = "wrong_revision"
	reasonLoadCABundleFailure   = "load_ca_bundle_failure"
	reasonWebhookConfigNotFound = "webhook_config_not_found"
	reasonWebhookEntryNotFound  = "webhook_entry_not_found"

-----END CERTIFICATE-----`)

func TestMutatingWebhookPatch(t *testing.T) {
	testRevision := "test-revision"
	wrongRevision := "wrong-revision"
	testRevisionLabel := map[string]string{label.IoIstioRev.Name: testRevision}
	wrongRevisionLabel := map[string]string{label.IoIstioRev.Name: wrongRevision}
	watcher := &keycertbundle.Watcher{}
	watcher.SetAndNotify(nil, nil, caBundle0)
	ts := []struct {
		name        string