DNS incorrect treats all services without VIP as headless

[howardjohn]

A config like:

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: se-0
  annotations:
    istio.io/use-waypoint: default
spec:
  hosts:
  - address.baz
  location: MESH_INTERNAL
  ports:
  - name: http-0
    number: 80
    protocol: HTTP
  resolution: STATIC
  workloadSelector:
    labels:
      app: echo

will resolve to all "echo" Pod IPs. This is not expected. It should NXDOMAIN (assuming no auto allocation enabled)

[MorrisLaw]

I was going to take this up, but I've decided not to work on this right now. This is open for anyone to pickup.