port: 443
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: rev.namespace.sidecar-injector.istio.io
  namespaceSelector:
    matchExpressions:
    - key: istio.io/rev
      operator: In
      values:
      - default
    - key: istio-injection
      operator: DoesNotExist
  objectSelector:
    matchExpressions:
    - key: istio.io/rev
      operator: NotIn
      values:
      - canary

	<dependencies>
		<dependency name="mymodule2" rev="2.0" e:attr4="value4"/>
		<dependency name="mymodule3" rev="2.0" changing="true" transitive="false"/>
		<dependency org="yourorg" name="yourmodule1" branch="trunk" rev="1.1" branchConstraint="branch1" revConstraint="1+" conf="myconf1"/>
		<dependency org="yourorg" name="yourmodule2" rev="2+" conf="myconf1->yourconf1"/>
		<dependency org="yourorg" name="yourmodule3" rev="3.1" conf="myconf1->yourconf1, yourconf2"/>

      port: 443
  failurePolicy: Fail
  name: rev.object.sidecar-injector.istio.io
  namespaceSelector:
    matchExpressions:
    - key: istio.io/rev
      operator: DoesNotExist
    - key: istio-injection
      operator: DoesNotExist
  objectSelector:
    matchExpressions:
    - key: sidecar.istio.io/inject
      operator: NotIn
      values:
      - "false"
    - key: istio.io/rev
      operator: In
      values:

	}
}

func (i *instance) CLIClientWithRevision(rev string) (kube.CLIClient, error) {
	if i.clients == nil {
		i.clients = make(map[string]kube.CLIClient)
	}
	if i.clients[rev] == nil {
		client, err := newKubeClientWithRevision(*i.kubeconfig, *i.configContext, rev)
		if err != nil {
			return nil, err
		}
		i.clients[rev] = client
	}
	return i.clients[rev], nil
}

    app: foo
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: foo-bar-rev-a
spec:
  replicas: 1
  selector:
    matchLabels:
      app: foo
      version: bar
  template:
    metadata:
      labels:
        app: foo
        version: bar
        test.istio.io/class: standard
        istio.io/rev: rev-a
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "15014"

	ret := &event{
		key:       string(e.Kv.Key),
		value:     e.Kv.Value,
		rev:       e.Kv.ModRevision,
		isDeleted: e.Type == clientv3.EventTypeDelete,
		isCreated: e.IsCreate(),
	}
	if e.PrevKv != nil {
		ret.prevValue = e.PrevKv.Value
	}
	return ret, nil
}

func progressNotifyEvent(rev int64) *event {
	return &event{
		rev:              rev,
		isProgressNotify: true,
	}

  matchPolicy: Equivalent
  name: rev.object.sidecar-injector.istio.io
  namespaceSelector:
    matchExpressions:
    - key: istio.io/rev
      operator: DoesNotExist
    - key: istio-injection
      operator: DoesNotExist
  objectSelector:
    matchExpressions:
    - key: sidecar.istio.io/inject
      operator: NotIn
      values:
      - "false"
    - key: istio.io/rev
      operator: In
      values:

				Prefix:   "default",
				Revision: "istio.io/rev=XXX",
			},
			wantRevision: "istio.io/rev=XXX",
		},
		{
			name:     "NoOverwriteNonEmptyInput",
			revision: "BadRevision",
			cfg: Config{
				Prefix:   "default",
				Revision: "istio.io/rev=XXX",
			},
			wantRevision: "istio.io/rev=XXX",
		},
		{
			name:     "OverwriteNonEmptyInput",
			revision: "istio.io/rev=canary",
			cfg: Config{
				Prefix:   "default",

    app: foo
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: foo-bar-rev-a
spec:
  replicas: 1
  selector:
    matchLabels:
      app: foo
      version: bar
  template:
    metadata:
      labels:
        app: foo
        version: bar
        test.istio.io/class: standard
        istio.io/rev: rev-a
      annotations:
        prometheus.io/scrape: "true"
        prometheus.io/port: "15014"

# Namespace is explicitly enabled in the new style
apiVersion: v1
kind: Namespace
metadata:
  labels:
    istio.io/rev: canary
  name: canary-test
---
# Namespace is explicitly enabled in the new style, but refers to a non-existent control plane
apiVersion: v1
kind: Namespace
metadata:
  labels:
    istio.io/rev: pidgeon
  name: pidgeon-test
---
# Namespace has both old and new labels
apiVersion: v1
kind: Namespace