serviceuser_webhook.go

// Copyright (c) 2022 Aiven, Helsinki, Finland. https://aiven.io/

package v1alpha1

import (
	"errors"

	"k8s.io/apimachinery/pkg/runtime"
	ctrl "sigs.k8s.io/controller-runtime"
	logf "sigs.k8s.io/controller-runtime/pkg/log"
	"sigs.k8s.io/controller-runtime/pkg/webhook"
)

// log is for logging in this package.
var serviceuserlog = logf.Log.WithName("serviceuser-resource")

func (in *ServiceUser) SetupWebhookWithManager(mgr ctrl.Manager) error {
	return ctrl.NewWebhookManagedBy(mgr).
		For(in).
		Complete()
}

//+kubebuilder:webhook:path=/mutate-aiven-io-v1alpha1-serviceuser,mutating=true,failurePolicy=fail,groups=aiven.io,resources=serviceusers,verbs=create;update,versions=v1alpha1,name=mserviceuser.kb.io,sideEffects=none,admissionReviewVersions=v1

var _ webhook.Defaulter = &ServiceUser{}

// Default implements webhook.Defaulter so a webhook will be registered for the type
func (in *ServiceUser) Default() {
	serviceuserlog.Info("default", "name", in.Name)
}

//+kubebuilder:webhook:verbs=create;update,path=/validate-aiven-io-v1alpha1-serviceuser,mutating=false,failurePolicy=fail,groups=aiven.io,resources=serviceusers,versions=v1alpha1,name=vserviceuser.kb.io,sideEffects=none,admissionReviewVersions=v1

var _ webhook.Validator = &ServiceUser{}

// ValidateCreate implements webhook.Validator so a webhook will be registered for the type
func (in *ServiceUser) ValidateCreate() error {
	serviceuserlog.Info("validate create", "name", in.Name)

	return nil
}

// ValidateUpdate implements webhook.Validator so a webhook will be registered for the type
func (in *ServiceUser) ValidateUpdate(old runtime.Object) error {
	serviceuserlog.Info("validate update", "name", in.Name)

	if in.Spec.Project != old.(*ServiceUser).Spec.Project {
		return errors.New("cannot update a Service User, project field is immutable and cannot be updated")
	}

	if in.Spec.ServiceName != old.(*ServiceUser).Spec.ServiceName {
		return errors.New("cannot update a Service User, serviceName field is immutable and cannot be updated")
	}

	if in.Spec.ConnInfoSecretTarget.Name != old.(*ServiceUser).Spec.ConnInfoSecretTarget.Name {
		return errors.New("cannot update a ServiceUser, connInfoSecretTarget.name field is immutable and cannot be updated")
	}

	return nil
}

// ValidateDelete implements webhook.Validator so a webhook will be registered for the type
func (in *ServiceUser) ValidateDelete() error {
	serviceuserlog.Info("validate delete", "name", in.Name)

	return nil
}