type containerAllocateResponseBuilderOption func(*containerAllocateResponseBuilder)

// withDevices sets the devices for the containerAllocateResponseBuilder
func withDevices(devices map[string]string) containerAllocateResponseBuilderOption {
	return func(b *containerAllocateResponseBuilder) {
		b.devices = devices
	}
}

	return WorkloadPolicyMatcher{
		Namespace:      proxy.ConfigNamespace,
		WorkloadLabels: proxy.Labels,
		IsWaypoint:     proxy.IsWaypointProxy(),
	}
}

func (p WorkloadPolicyMatcher) WithService(service *Service) WorkloadPolicyMatcher {
	if service == nil {
		return p
	}
	if service.Attributes.Namespace != p.Namespace {

		}
	}

	ct := &computedTelemetries{
		telemetryKey: key,
		Metrics:      ms,
		Logging:      ls,
		Tracing:      ts,
	}

	matcher := PolicyMatcherForProxy(proxy).WithService(svc)
	for _, telemetry := range t.NamespaceToTelemetries[namespace] {
		spec := telemetry.Spec
		// TODO in many other places, empty selector matches all policy
		if len(spec.GetSelector().GetMatchLabels()) == 0 {

		lookupInNamespaces = []string{proxy.ConfigNamespace, ps.Mesh.RootNamespace}
	} else {
		lookupInNamespaces = []string{proxy.ConfigNamespace}
	}

	selectionOpts := PolicyMatcherForProxy(proxy).WithService(info.Service)
	for _, ns := range lookupInNamespaces {
		if wasmPlugins, ok := ps.wasmPluginsByNamespace[ns]; ok {
			for _, plugin := range wasmPlugins {