webhooks/appmesh/backendgroup_validator.go

package appmesh

import (
	"context"
	appmesh "github.com/aws/aws-app-mesh-controller-for-k8s/apis/appmesh/v1beta2"
	"github.com/aws/aws-app-mesh-controller-for-k8s/pkg/webhook"
	"github.com/pkg/errors"
	"k8s.io/apimachinery/pkg/runtime"
	"reflect"
	ctrl "sigs.k8s.io/controller-runtime"
	"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
	"strings"
)

const apiPathValidateAppMeshBackendGroup = "/validate-appmesh-k8s-aws-v1beta2-backendgroup"

// NewBackendGroupValidator returns a validator for BackendGroup.
func NewBackendGroupValidator() *backendGroupValidator {
	return &backendGroupValidator{}
}

var _ webhook.Validator = &backendGroupValidator{}

type backendGroupValidator struct {
}

func (v *backendGroupValidator) Prototype(req admission.Request) (runtime.Object, error) {
	return &appmesh.BackendGroup{}, nil
}

func (v *backendGroupValidator) ValidateCreate(ctx context.Context, obj runtime.Object) error {
	return nil
}

func (v *backendGroupValidator) ValidateUpdate(ctx context.Context, obj runtime.Object, oldObj runtime.Object) error {
	bg := obj.(*appmesh.BackendGroup)
	oldVS := oldObj.(*appmesh.BackendGroup)
	if err := v.enforceFieldsImmutability(bg, oldVS); err != nil {
		return err
	}
	return nil
}

func (v *backendGroupValidator) ValidateDelete(ctx context.Context, obj runtime.Object) error {
	return nil
}

// enforceFieldsImmutability will enforce immutable fields are not changed.
func (v *backendGroupValidator) enforceFieldsImmutability(bg *appmesh.BackendGroup, oldVS *appmesh.BackendGroup) error {
	var changedImmutableFields []string
	if !reflect.DeepEqual(bg.Spec.MeshRef, oldVS.Spec.MeshRef) {
		changedImmutableFields = append(changedImmutableFields, "spec.meshRef")
	}
	if len(changedImmutableFields) != 0 {
		return errors.Errorf("%s update may not change these fields: %s", "BackendGroup", strings.Join(changedImmutableFields, ","))
	}
	return nil
}

// +kubebuilder:webhook:path=/validate-appmesh-k8s-aws-v1beta2-backendgroup,mutating=false,failurePolicy=fail,groups=appmesh.k8s.aws,resources=backendgroups,verbs=create;update,versions=v1beta2,name=vbackendgroup.appmesh.k8s.aws,sideEffects=None,webhookVersions=v1beta1

func (v *backendGroupValidator) SetupWithManager(mgr ctrl.Manager) {
	mgr.GetWebhookServer().Register(apiPathValidateAppMeshBackendGroup, webhook.ValidatingWebhookForValidator(v))
}