-
Notifications
You must be signed in to change notification settings - Fork 284
/
snowippool_webhook.go
68 lines (52 loc) · 2.21 KB
/
snowippool_webhook.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
package v1alpha1
import (
"fmt"
apierrors "k8s.io/apimachinery/pkg/api/errors"
"k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/util/validation/field"
ctrl "sigs.k8s.io/controller-runtime"
logf "sigs.k8s.io/controller-runtime/pkg/log"
"sigs.k8s.io/controller-runtime/pkg/webhook"
)
// log is for logging in this package.
var snowippoollog = logf.Log.WithName("snowippool-resource")
// SetupWebhookWithManager sets up the webhook manager for SnowIPPool.
func (r *SnowIPPool) SetupWebhookWithManager(mgr ctrl.Manager) error {
return ctrl.NewWebhookManagedBy(mgr).
For(r).
Complete()
}
//+kubebuilder:webhook:path=/validate-anywhere-eks-amazonaws-com-v1alpha1-snowippool,mutating=false,failurePolicy=fail,sideEffects=None,groups=anywhere.eks.amazonaws.com,resources=snowippools,verbs=create;update,versions=v1alpha1,name=validation.snowippool.anywhere.amazonaws.com,admissionReviewVersions={v1,v1beta1}
var _ webhook.Validator = &SnowIPPool{}
// ValidateCreate implements webhook.Validator so a webhook will be registered for the type.
func (r *SnowIPPool) ValidateCreate() error {
snowippoollog.Info("validate create", "name", r.Name)
return r.Validate()
}
// ValidateUpdate implements webhook.Validator so a webhook will be registered for the type.
func (r *SnowIPPool) ValidateUpdate(old runtime.Object) error {
snowippoollog.Info("validate update", "name", r.Name)
oldPool, ok := old.(*SnowIPPool)
if !ok {
return apierrors.NewBadRequest(fmt.Sprintf("expected a SnowIPPool but got a %T", old))
}
if allErrs := validateImmutableFieldsSnowIPPool(r, oldPool); len(allErrs) != 0 {
return apierrors.NewInvalid(GroupVersion.WithKind(SnowIPPoolKind).GroupKind(), r.Name, allErrs)
}
return r.Validate()
}
// ValidateDelete implements webhook.Validator so a webhook will be registered for the type.
func (r *SnowIPPool) ValidateDelete() error {
snowippoollog.Info("validate delete", "name", r.Name)
return nil
}
func validateImmutableFieldsSnowIPPool(new, old *SnowIPPool) field.ErrorList {
var allErrs field.ErrorList
if !SnowIPPoolsSliceEqual(new.Spec.Pools, old.Spec.Pools) {
allErrs = append(
allErrs,
field.Forbidden(field.NewPath("spec").Child("pools"), "field is immutable"),
)
}
return allErrs
}