"Namespace":   apps.Namespace.Name(),
				}, `
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: global-strict
spec:
  selector:
    matchLabels:
      app: "{{ .Destination }}"
  mtls:
    mode: STRICT
  portLevelMtls:
    8080:
      mode: PERMISSIVE
				`).ApplyOrFail(t)
				opt = opt.DeepCopy()

			},
			pdbs: []*policy.PodDisruptionBudget{
				{
					Spec:   policy.PodDisruptionBudgetSpec{Selector: &metav1.LabelSelector{MatchLabels: map[string]string{"app": "foo"}}},
					Status: policy.PodDisruptionBudgetStatus{DisruptionsAllowed: 1},
				},
			},
			expected: [][]candidate{
				{
					candidate{
						victims: &extenderv1.Victims{

				},
				Providers: []*tpb.ProviderRef{
					{
						Name: "envoy",
					},
				},
			},
		},
	}
	sidecarClient := &tpb.Telemetry{
		Selector: &v1beta1.WorkloadSelector{
			MatchLabels: labels,
		},
		AccessLogging: []*tpb.AccessLogging{
			{
				Match: &tpb.AccessLogging_LogSelector{
					Mode: tpb.WorkloadMode_CLIENT,
				},
				Providers: []*tpb.ProviderRef{
					{

}

func TestController_ServiceWithFixedDiscoveryNamespaces(t *testing.T) {
	meshWatcher := mesh.NewFixedWatcher(&meshconfig.MeshConfig{
		DiscoverySelectors: []*meshconfig.LabelSelector{
			{
				MatchLabels: map[string]string{
					"pilot-discovery": "enabled",
				},
			},
			{
				MatchExpressions: []*meshconfig.LabelSelectorRequirement{
					{
						Key:      "env",

      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
    spec:
      selector:
        matchLabels:
          "{{.GatewayNameLabel}}": "{{.Name}}"
      template:
        metadata:
          annotations:
            {{- toJsonMap

      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
    spec:
      selector:
        matchLabels:
          "{{.GatewayNameLabel}}": "{{.Name}}"
      template:
        metadata:
          annotations:
            {{- toJsonMap

      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
    spec:
      selector:
        matchLabels:
          "{{.GatewayNameLabel}}": "{{.Name}}"
      template:
        metadata:
          annotations:
            {{- toJsonMap

      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
    spec:
      selector:
        matchLabels:
          "{{.GatewayNameLabel}}": "{{.Name}}"
      template:
        metadata:
          annotations:
            {{- toJsonMap

      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
    spec:
      selector:
        matchLabels:
          "{{.GatewayNameLabel}}": "{{.Name}}"
      template:
        metadata:
          annotations:
            {{- toJsonMap

      ownerReferences:
      - apiVersion: gateway.networking.k8s.io/v1beta1
        kind: Gateway
        name: "{{.Name}}"
        uid: "{{.UID}}"
    spec:
      selector:
        matchLabels:
          "{{.GatewayNameLabel}}": "{{.Name}}"
      template:
        metadata:
          annotations:
            {{- toJsonMap