Error from server: error when creating /path/to/yaml: admission webhook "pilot.validation.istio.io" denied the request: configuration is invalid: envoy filter: missing filters

Config
1

Hey Team,

I was wondering why the validation is failing to apply on pilot even while following the help documentation? I am currently using the istio installed by GKE embeded

client version: 1.5.2
citadel version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
galley version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
ingressgateway version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
pilot version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
policy version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
sidecar-injector version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
telemetry version: c834c448a92e691d71b42a966d94fb1822ac10e1-dirty
pilot version: 1.5.2
data plane version: 1.0-dev (11 proxies)

apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: hcm-tweaks
  namespace: istio-system
spec:
  workloadSelector:
    labels:
      istio: ingress-gateway
  configPatches:
  - applyTo: NETWORK_FILTER # http connection manager is a filter in Envoy
    match:
      context: GATEWAY
      listener:
        filterChain:
          sni: app.example.com
          filter:
            name: "envoy.http_connection_manager"
    patch:
      operation: MERGE
      value:
        idle_timeout: 30s
        xff_num_trusted_hops: 5