Validations - Ensure ServiceEntry has WorkloadEntry addresses

[nrfox]

Validate that internal ServiceEntry objects contain addresses that match the WorkloadEntry objects that they select.

Given the following ServiceEntry and WorkloadEntry

apiVersion: networking.istio.io/v1beta1
kind: ServiceEntry
metadata:
  name: ratings
spec:
  addresses:
    - ratings.internal.cloud
  hosts:
    - ratings
  location: MESH_INTERNAL
  resolution: STATIC
  ports:
    - number: 9080
      name: http
      protocol: HTTP
      targetPort: 9080
  workloadSelector:
    labels:
      app: ratings

apiVersion: networking.istio.io/v1beta1
kind: WorkloadEntry
metadata:
  name: ratings-v1
spec:
  serviceAccount: ratings-vm
  address: ratings.internal.cloud
  labels:
    app: ratings
    version: v1
  ports:
    http: 9080

Kiali validations should ensure that for every WorkloadEntry object selected by the ServiceEntry.workloadSelector field, the ServiceEntry.addresses field has an entry that matches the WorkloadEntry.address field. Without this, Istio does not create an upstream cluster in the envoy config for the workload and traffic will be routed to the PassthroughCluster even if it makes it to the app successfully.