[Bug]: No validation in adding the token duration with spaces

[Tharanidk]

Please select the area the issue is related to

Area/Management (Management API or Management Portal UI)

Please select the aspect the issue is related to

Aspect/API (API backends, definitions, contracts, interfaces, OpenAPI), Aspect/Monitoring (Metrics, observability, health checks, alerts)

Description

When configuring a Token Based Ratelimit policy on an LLM Provider under the Global Guardrails & Policies section, the duration field accepts values that are not valid for example "10 m". The invalid value is accepted by the UI, saved by the Platform API, and the deployment reports success .

No validation error is shown at save time, deploy time, or runtime. The user believes a limit is active when it is not. The rate limit has silently dropped.

Steps to Reproduce

1. Open an LLM Provider in AI Workspace → Global Guardrails & Policies → add Token Based Ratelimit (v1).
2. Under totalTokenLimits → Item 1, set count = 56 and duration = 10 m (with a space).
3. Save the policy and Deploy to Gateway.
4. Send a chat completion request whose token usage exceeds the limit.
5. Repeat the request 2–3 times.

Severity Level of the Issue

Severity/Trivial (Cosmetic issues. Can be fixed in future releases)

Environment Details (with versions)

No response

[thivindu]

In this scenario no validation is not shown when adding, updating and saving the LLM provider with the policy. However the deployment fails with a message Failed to process deployment. Please check gateway logs. and the precise error is shown in the gateway logs,

gateway-controller-1  | time=2026-07-10T05:46:28.311Z level=ERROR source=/build/pkg/controlplane/client.go:2129 msg="Failed to create LLM provider from YAML" provider_id=019f4a8d-88e9-7e24-9b5c-1c1369acbc88 error="failed to deploy LLM provider configuration from YAML: provider policy validation failed with 1 error(s): 1. spec.globalPolicies[1].params.totalTokenLimits.0.duration: Does not match pattern '^[-+]?(([0-9]+(\\.[0-9]*)?|\\.[0-9]+)(ns|us|µs|ms|s|m|h))+$'"
gateway-controller-1  | time=2026-07-10T05:46:28.311Z level=INFO source=/build/pkg/controlplane/client.go:697 msg="Deployment ack sent" deployment_id=019f4a90-1e6a-7d06-ad7a-9ada2776f66c artifact_id=019f4a8d-88e9-7e24-9b5c-1c1369acbc88 resource_type=llmprovider action=deploy status=failed

This is not user friendly and the admin user who configures the LLM providers may not have access to the gateway logs.

Therefore, improving the UX by adding a frontend validation.