}},
					SubjectAltNames: []string{"san1"},
					Resolution:      networking.ServiceEntry_DNS,
				},
			},
			result: []*workloadapi.Service{
				{
					Name:      "name",
					Namespace: "ns",
					Hostname:  "a.example.com",
					Addresses: []*workloadapi.NetworkAddress{{
						Network: testNW,
						Address: netip.AddrFrom4([4]byte{1, 2, 3, 4}).AsSlice(),
					}},
					Ports: []*workloadapi.Port{{
						ServicePort: 80,

			expectedError: true,
		},
		{
			in: "http://foo.bar.com",
			expected: security.JwksInfo{
				Hostname: "foo.bar.com",
				Scheme:   "http",
				Port:     80,
				UseSSL:   false,
			},
		},
		{
			in: "https://foo.bar.com",
			expected: security.JwksInfo{
				Hostname: "foo.bar.com",
				Scheme:   "https",
				Port:     443,
				UseSSL:   true,
			},
		},
		{

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue:
  - 50478
releaseNotes:
  - |
    **Fixed** a behavioral change in Istio 1.20 that caused merging of ServiceEntries with the same hostname and port names

                        settings.apply(mapOf("plugin" to "com.gradle.develocity"))
                        settings.develocity {
                            buildScan.obfuscation.hostname {
                                // lambda expression
                                "unset"
                            }
                        }
                    }
                }
            """

			Key:        file.MustAsString(path.Join(env.IstioSrc, "tests/testdata/certs/dns/key.pem")),
			// Override hostname to match the SAN in the cert we are using
			// TODO(nmittler): We should probably make this the same as ExternalHostname
			Hostname: "server.default.svc",
		},
		Subsets: []echo.SubsetConfig{
			{
				Version:     "v1",

	// hostname of this endpoint. This field may be used by consumers of
	// endpoints to distinguish endpoints from each other (e.g. in DNS names).
	// Multiple endpoints which use the same hostname should be considered
	// fungible (e.g. multiple A values in DNS). Must be lowercase and pass DNS
	// Label (RFC 1123) validation.
	// +optional
	Hostname *string `json:"hostname,omitempty" protobuf:"bytes,3,opt,name=hostname"`

	}

	if u.Port() != "" {
		info.Port, err = strconv.Atoi(u.Port())
		if err != nil {
			return JwksInfo{}, err
		}
	}
	info.Hostname = host.Name(u.Hostname())
	info.Scheme = u.Scheme

	return info, nil
}

func CheckEmptyValues(key string, values []string) error {
	for _, value := range values {
		if value == "" {

  "endpoints": [
    {
      "addresses": [
        "addressesValue"
      ],
      "conditions": {
        "ready": true,
        "serving": true,
        "terminating": true
      },
      "hostname": "hostnameValue",
      "targetRef": {
        "kind": "kindValue",
        "namespace": "namespaceValue",
        "name": "nameValue",
        "uid": "uidValue",
        "apiVersion": "apiVersionValue",

apiVersion: discovery.k8s.io/v1beta1
endpoints:
- addresses:
  - addressesValue
  conditions:
    ready: true
    serving: true
    terminating: true
  hints:
    forZones:
    - name: nameValue
  hostname: hostnameValue
  nodeName: nodeNameValue
  targetRef:
    apiVersion: apiVersionValue
    fieldPath: fieldPathValue
    kind: kindValue
    name: nameValue
    namespace: namespaceValue

  "endpoints": [
    {
      "addresses": [
        "addressesValue"
      ],
      "conditions": {
        "ready": true,
        "serving": true,
        "terminating": true
      },
      "hostname": "hostnameValue",
      "targetRef": {
        "kind": "kindValue",
        "namespace": "namespaceValue",
        "name": "nameValue",
        "uid": "uidValue",
        "apiVersion": "apiVersionValue",