Istio currently has a template for how it provisions the underlying Envoy proxy for Gateways (used for ingress). We need to ensure that the default configuration configures a rollout strategy that minimizes downtime as much as feasible, and we also need tests for this behavior to ensure we don't introduce regressions to this in the future.