compositeelasticquota_webhook.go

/*
 * Copyright 2023 nebuly.com.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package v1alpha1

import (
	"context"
	"fmt"
	"github.com/nebuly-ai/nos/pkg/constant"
	"github.com/nebuly-ai/nos/pkg/util"
	"k8s.io/apimachinery/pkg/runtime"
	ctrl "sigs.k8s.io/controller-runtime"
	. "sigs.k8s.io/controller-runtime/pkg/client"
	logf "sigs.k8s.io/controller-runtime/pkg/log"
	"sigs.k8s.io/controller-runtime/pkg/webhook"
)

// log is for logging in this package.
var ceqLog = logf.Log.WithName("ceq-resource")

func (r *CompositeElasticQuota) SetupWebhookWithManager(mgr ctrl.Manager) error {
	if client == nil {
		client = mgr.GetClient()
	}
	return ctrl.NewWebhookManagedBy(mgr).
		For(r).
		Complete()
}

//+kubebuilder:webhook:path=/validate-nos-nebuly-ai-v1alpha1-compositeelasticquota,mutating=false,failurePolicy=fail,sideEffects=None,groups=nos.nebuly.com,resources=compositeelasticquotas,verbs=create;update,versions=v1alpha1,name=vcompositeelasticquota.kb.io,admissionReviewVersions=v1

var _ webhook.Validator = &CompositeElasticQuota{}

// ValidateCreate implements webhook.Validator so a webhook will be registered for the type
func (r *CompositeElasticQuota) ValidateCreate() error {
	ceqLog.V(1).Info("validate create", "name", r.Name)
	return validateCompositeElasticQuotaNamespaces(r)
}

// ValidateUpdate implements webhook.Validator so a webhook will be registered for the type
func (r *CompositeElasticQuota) ValidateUpdate(old runtime.Object) error {
	ceqLog.V(1).Info("validate update", "name", r.Name)
	return validateCompositeElasticQuotaNamespaces(r)
}

// ValidateDelete implements webhook.Validator so a webhook will be registered for the type
func (r *CompositeElasticQuota) ValidateDelete() error {
	return nil
}

// validateCompositeElasticQuotaNamespaces checks if the specified namespaces are subject to
// any other CompositeElasticQuota: if so it returns an error
func validateCompositeElasticQuotaNamespaces(instance *CompositeElasticQuota) error {
	var ceqList CompositeElasticQuotaList
	if err := client.List(context.Background(), &ceqList); err != nil {
		eqlog.Error(err, "unable to list composite elastic quotas")
		return fmt.Errorf(constant.InternalErrorMsg)
	}
	for _, ceq := range ceqList.Items {
		if ObjectKeyFromObject(&ceq) == ObjectKeyFromObject(instance) {
			continue
		}
		for _, ns := range instance.Spec.Namespaces {
			if util.InSlice(ns, ceq.Spec.Namespaces) {
				return fmt.Errorf(
					"a namespace can belong to only 1 CompositeElasticQuota: "+
						"namespace %q already belongs to CompositeElasticQuota \"%s/%s\"",
					ns,
					ceq.Namespace,
					ceq.Name,
				)
			}
		}
	}
	return nil
}