What is the issue?

While working on other changes to the policy controller, I noticed that the validating admission webhook validates the policy.linkerd.io version of the HTTPRoute CRD, but not the upstream gateway.networking.kubernetes.io version. We should probably perform the same validation for both HTTPRoute objects.

How can it be reproduced?

n/a

Logs, error output, etc

n/a

output of linkerd check -o short

n/a

Environment

• Linkerd 2.13+

Possible solution

We should probably add an implementation of the validating admission controller logic for both versions of HTTPRoute.

Additional context

No response

Would you like to work on fixing this bug?

yes