Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

From FTI-6622.
The customer adds annotation konghq.com/protocols:http,tcp to an ingress which are mutually exclusive in the protocols field in Kong routes. The ingress passes the KIC's validation webhook but causes invalid Kong configuration generated.
We found that when we translate the Ingress (and also HTTPRoute) to Kong routes for validation, we did not override the translated route for validation. So if the annotation causes the Kong route invalid, it passes the validation but is translated to invalid configuration when applying to Kong gateways.

Expected Behavior

The Ingress with invalid konghq.com/protocols is rejected in validation webhook.

Steps To Reproduce

1. Create an Ingress (say test-ingress)
2. Annotate the Ingress with the invalid protocol annotation konghq.com/protocols:http,tcp (kubectl annotate ingress/test-ingress konghq.com/protocols="http,tcp")
3. Run `kubectl describe ingress test-ingress`, you can see the `KongConfigurationApplyFailed` event.

Kong Ingress Controller version

3.4.4

Kubernetes version

Irrelevant.

Anything else?

No response