MeshTimeout with top-level MeshGateway is not allowed by validation

[lobkovilya]

Description

Apply:

type: MeshTimeout
name: mt-1
mesh: default
spec:
  targetRef:
    kind: MeshGateway
    name: gateway-proxy
  from:
    - targetRef:
        kind: Mesh
      default:
        idleTimeout: 50s
        connectionTimeout: 51s
        http:
          requestTimeout: 52s
          streamIdleTimeout: 53s
          maxStreamDuration: 54s
          maxConnectionDuration: 55s

Result:

Error: YAML contains invalid resource: spec.from: must not be defined.

However, the following policy works

type: MeshTimeout
name: mt-1
mesh: default
spec:
  targetRef:
    kind: Mesh
    proxyTypes:
      - Gateway
  from:
    - targetRef:
        kind: Mesh
      default:
        idleTimeout: 50s
        connectionTimeout: 51s
        http:
          requestTimeout: 52s
          streamIdleTimeout: 53s
          maxStreamDuration: 54s
          maxConnectionDuration: 55s

[lobkovilya]

@michaelbeaumont do you know if it's expected and we need a better explanation in the error or it's a bug?

[lukidzi]

Triage: we should support MeshGateway and setting inbound timeouts for specific gateway