k8s-overcommit-operator/api/v1alphav1/overcommitclass_webhook.go at main · InditexTech/k8s-overcommit-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
// SPDX-FileCopyrightText: 2025 2025 INDUSTRIA DE DISEÑO TEXTIL S.A. (INDITEX S.A.)
// SPDX-FileContributor: enriqueavi@inditex.com
//
// SPDX-License-Identifier: Apache-2.0

package v1alphav1

import (
	"context"

	ctrl "sigs.k8s.io/controller-runtime"
	"sigs.k8s.io/controller-runtime/pkg/client"
	logf "sigs.k8s.io/controller-runtime/pkg/log"
	"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
)

// log is for logging in this package.
var overcommitclasslog = logf.Log.WithName("overcommitclass-resource")

// +kubebuilder:object:generate=false
type OvercommitClassValidator struct {
	// +kubebuilder:skip
	Client client.Client
}

func (v *OvercommitClassValidator) InjectClient(c client.Client) {
	v.Client = c
}

// SetupWebhookWithManager will setup the manager to manage the webhooks
func (r *OvercommitClass) SetupWebhookWithManager(mgr ctrl.Manager) error {
	validator := &OvercommitClassValidator{}
	validator.InjectClient(mgr.GetClient())
	return ctrl.NewWebhookManagedBy(mgr, r).
		WithValidator(validator).
		Complete()
}

// +kubebuilder:webhook:path=/validate-overcommit-inditex-dev-v1alphav1-overcommitclass,mutating=false,failurePolicy=fail,sideEffects=None,groups=overcommit.inditex.dev,resources=overcommitclass,verbs=create;update,versions=v1alphav1,name=overcommitclass.inditex.dev,admissionReviewVersions=v1

// ValidateCreate implements webhook.Validator so a webhook will be registered for the type
func (v *OvercommitClassValidator) ValidateCreate(ctx context.Context, overcommitClass *OvercommitClass) (admission.Warnings, error) {

	overcommitclasslog.Info("validate create", "name", overcommitClass.Name)

	err := isClassDefault(*overcommitClass, v.Client)
	if err != nil {
		return nil, err
	}

	err = validateSpecOvercommit(*overcommitClass)
	if err != nil {
		return nil, err
	}

	err = checkDecimals(*overcommitClass)
	if err != nil {
		return nil, err
	}

	err = checkIsRegexValid(overcommitClass.Spec.ExcludedNamespaces)
	if err != nil {
		return nil, err
	}

	return nil, nil
}

// ValidateUpdate implements webhook.Validator so a webhook will be registered for the type
func (v *OvercommitClassValidator) ValidateUpdate(ctx context.Context, oldOvercommitClass *OvercommitClass, newOvercommitClass *OvercommitClass) (admission.Warnings, error) {

	overcommitclasslog.Info("validate update", "name", oldOvercommitClass.Name)

	if !oldOvercommitClass.Spec.IsDefault {
		err := isClassDefault(*newOvercommitClass, v.Client)
		if err != nil {
			return nil, err
		}
	}

	err := validateSpecOvercommit(*newOvercommitClass)
	if err != nil {
		return nil, err
	}

	err = checkDecimals(*newOvercommitClass)
	if err != nil {
		return nil, err
	}
	err = checkIsRegexValid(newOvercommitClass.Spec.ExcludedNamespaces)
	if err != nil {
		return nil, err
	}
	return nil, nil
}

// ValidateDelete implements webhook.Validator so a webhook will be registered for the type
func (v *OvercommitClassValidator) ValidateDelete(ctx context.Context, overcommitClass *OvercommitClass) (admission.Warnings, error) {
	overcommitclasslog.Info("validate delete", "name", overcommitClass.Name)

	return nil, nil
}