☔ From policies rework

[lahabana]

Description

We need to be able to make from targetRef to work better.

• How do we match just a port when we can't use MeshService?
• How do we make the difference between the part of the proxy being modified (.e.g the inbound) vs the traffic coming in (.e.g: traffic coming from client X or Y only)?

What we have currently doesn't work and we should improve

Stop relying on inbound tags

• MADR for Inbound policies #11885
• Make sure Dataplane labels are complete #12357
• Add kind Dataplane for top-level targetRefs #12358
• New top-level kind Dataplane kuma-website#2129
• Implement matching for the new top-level targetRef kind Dataplane #12359
• Inspect API support for top-level targetRef sectionName #12361
• Deprecate top-level targetRef MeshSubset #12362
• Deprecate top-level kind MeshSubset kuma-website#2130
• Deprecate targetRef.proxyTypes field #12363
• Deprecate targetRef.proxyTypes kuma-website#2131

Introduce spec.rules for inbound policies

• Add spec.rules for MeshTimeout #12364
• Shared algo for all policies that supports spec.rules  #12382
• MeshTimeout spec.rules to do the actual configuration #12365
• Document new spec.rules field for MeshTimeout kuma-website#2132
• MeshTimeout deprecate spec.from #12376
• Implement the inbound port selection by top-level targetRef.sectionName field  #12375
• Inspect API support for the new spec.rules field #12381
• Add spec.rules for MeshAccessLog #12367
• MeshAccessLog spec.rules to do the actual configuration #12369
• Document new spec.rules field for MeshAccessLog kuma-website#2133
• MeshAccessLog deprecate spec.from #12379
• Add spec.rules for MeshTLS #12366
• MeshTLS spec.rules to do the actual configuration #12368
• Document new spec.rules field for MeshTLS kuma-website#2134
• MeshTLS deprecate spec.from #12377
• Add spec.rules for MeshRateLimit #12370
• MeshRateLimit spec.rules to do the actual configuration #12371
• Document new spec.rules field for MeshRateLimit kuma-website#2135
• MeshRateLimit deprecate spec.from #12378
• Update Policies / Introduction with the new spec.rules field kuma-website#2137
• Document new spec.rules field for MeshCircuitBreaker kuma-website#2166
• MeshCircuitBreaker spec.rules to do the actual configuration #12773
• MeshCircuitBreaker deprecate spec.from #12774
• Policies with spec.from targeting MeshGateway should be updated to use spec.rules #12729
• Add support for rules in MeshTimeout selecting gateway #12792
• Add support for rules in MeshAccessLog selecting gateway #12817
• Add support for rules in MeshTLS selecting gateway #12819