feat(securitypolicy): Update GatewayAPI to support tcp security policy

[davem-git]

What type of PR is this?
Feature

What this PR does / why we need it:

Which issue(s) this PR fixes:

Fixes ##4908

Release Notes: Yes/No
No

[codecov]

Codecov Report

❌ Patch coverage is 91.66667% with 7 lines in your changes missing coverage. Please review.
✅ Project coverage is 71.08%. Comparing base (c68db79) to head (7e601e5).
⚠️ Report is 3 commits behind head on main.

Files with missing lines	Patch %	Lines
internal/gatewayapi/securitypolicy.go	91.66%	3 Missing and 4 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7171      +/-   ##
==========================================
+ Coverage   71.04%   71.08%   +0.03%     
==========================================
  Files         229      229              
  Lines       41099    41164      +65     
==========================================
+ Hits        29198    29260      +62     
- Misses      10181    10184       +3     
  Partials     1720     1720              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[kkk777-7]

LGTM thanks!

[kkk777-7]

/retest

[zhaohuabing]

LGTM. Thanks!

[davem-git]

Fixed a test that was still referencing alpha2, which was removed in this PR. Sorry about that. The update cleared existing approvals.

[davem-git]

the coverage test seems like a network timeout failure

[arkodg]

curious why this code is needed when its NA for TCPRoute, which is checked in validateSecurityPolicyForTCP

[davem-git]

which part are you referring to, why we do switch.route? TCP is applied differently with expectedTCPRouteName := strings.TrimSuffix(prefix, "/") , but i don't see that getting applied just continueing if it doesn't match

then there's this line

if target.SectionName != nil && string(*target.SectionName) != r.Destination.Metadata.SectionName {
  continue
}```
vs this one for httproute
```go

if target.SectionName != nil && string(*target.SectionName) != r.Metadata.SectionName {
continue
}

those have to be different.

let me see if i can reduce the difference

[arkodg]

LGTM thanks