ClientTrafficPolicy should handle http3 + client TLS gracefully instead of generating a rejected QUIC listener #8581
Description
Description:
Enabling both HTTP/3 and downstream client certificate validation via ClientTrafficPolicy currently produces a QUIC listener that Envoy rejects.
Example Envoy warning:
gRPC config for type.googleapis.com/envoy.config.listener.v3.Listener rejected:
Error adding/updating listener(s) ingress/envoy-private/https-mtls-quic:
TLS Client Authentication is not supported over QUIC
Envoy Gateway should detect this unsupported combination earlier and handle it gracefully by surfacing it to Gateway/CTP status.