An example Sidecar CRD in networking/v1alpha3/sidecar.proto is invalid.

It's the example that starts at line 77. It is generated into https://preliminary.istio.io/docs/reference/config/networking/v1alpha3/sidecar/ . If I take that example and use istioctl validate -f the error response is

* error validating resource (networking.istio.io/v1alpha3, Kind=Sidecar Name=default Namespace=): sidecar: the egress listener with empty port should be the last listener in the list

The same error appears in 1.1 RC 3 if I do

kubectl create ns prod-us1
kubectl apply -f /tmp/sidecar.yaml

Perhaps there is an extra - dash in the YaML?