32 Commits

Author SHA1 Message Date
xing-yang
36738cd8bc Add nil check for SourceVolumeMode in the ValidationWebHook 2024-02-09 12:53:14 -05:00
xing-yang
3ed4ebd3d8 Use client v7 2024-01-30 17:40:58 -05:00
Niels de Vos
9e58d4cc61 Selector in VolumeGroupSnapshotSource API should be optional 2024-01-26 17:27:25 +01:00
Raunak Pradip Shah
e6dc65fefe Fix unit test and remove comments 2024-01-08 10:12:47 -08:00
Raunak Pradip Shah
0bd355cf29 update API names in group snapshot content to be consistent with volume snapshots 2024-01-05 11:29:51 -08:00
Alex Kalenyuk
895dc73977 Enable prevent-volume-mode-conversion by default following k8s 1.28 release
This is beta since 1.27 so we can safely default to true, to get this new validation logic.
https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/3141-prevent-volume-mode-conversion/kep.yaml#L30

Signed-off-by: Alex Kalenyuk <akalenyu@redhat.com>
2023-12-10 14:23:29 +02:00
Rakshith R
aafc456527 add cmdline args to enable group snapshot webhooks
VolumeGroupSnapshots are still in alpha.
This commit adds cmdline args to enable group snapshot
webhooks while keeping it disbaled by default.

Signed-off-by: Rakshith R <rakshith.r.0001@gmail.com>
2023-10-17 15:51:12 +05:30
xing-yang
fd03420fd8 Remove direct dep on kubernetes 2023-09-13 16:24:33 +00:00
guoguangwu
62c611a51a chore: remove refs to deprecated io/ioutil 2023-06-25 11:09:17 +08:00
Rakshith R
a3cb5a927f add groupsnapshot related webhooks 2023-05-08 18:25:23 +05:30
Tiger Kaovilai
e19220824d typo snapshot_test.go 2022-08-10 19:57:13 -04:00
Tiger Kaovilai
ea89dde907 typo snapshot.go 2022-08-10 19:54:56 -04:00
Raunak Pradip Shah
23ef3b5220 Remove v1beta1 references from validation webhook 2022-05-11 12:16:11 +05:30
Kubernetes Prow Robot
9ffdb95103 Merge pull request #690 from humblec/rbac
replace serviceAccountName key, rbac and cleanup in the code
2022-04-25 07:39:39 -07:00
Raunak Pradip Shah
24bbdae16f Add feature flag 2022-04-19 16:00:43 +05:30
Raunak Pradip Shah
bb13123906 Add webhook to make SourceVolumeMode immutable 2022-04-19 15:59:24 +05:30
Humble Chirammal
f30b14f8fd make use of short declaration of variables and cleanup code
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-04-13 08:35:03 +05:30
Shawn Hurley
689a875bfc Adding test case for updating default class to new driver 2022-04-01 12:46:36 -04:00
Shawn Hurley
27f8d3fe72 Addressing feedback given 2022-03-29 11:36:04 -04:00
Shawn Hurley
b52d1d474a add unit test coverage for v1beta1 2022-03-25 14:18:30 -04:00
Shawn Hurley
eeb9897c67 [] Adding validation to snapshot class defaulting 2022-03-25 13:43:09 -04:00
Raunak Pradip Shah
5b3a927d2a Vendored deps 2022-03-24 21:40:29 +05:30
Raunak Pradip Shah
d300796fab - Update snapshotter module to v6
- Update snapshotter client module to v5
- Update go version in client modules to v1.17
2022-03-23 08:59:19 +05:30
prateekpandey14
533ed886dc Move snapshot validations to validation-webhook directory
Signed-off-by: prateekpandey14 <prateekpandey14@gmail.com>
2021-03-14 13:39:57 +05:30
xing-yang
730e6f6458 Update to client/v4 2020-12-14 18:50:10 +00:00
xing-yang
5069c99ec3 Update controller based on snapshot v1 apis 2020-12-11 21:13:47 +00:00
xing-yang
6761111167 Bump csi-lib-utils to v0.9.0 2020-12-05 02:39:03 +00:00
xing-yang
7efebbedec Switch to klog/v2 2020-12-04 15:53:48 +00:00
Grant Griffiths
b457b08ffc Add certwatcher to webhook server
Signed-off-by: Grant Griffiths <grant@portworx.com>
2020-11-18 23:04:13 -08:00
xing-yang
a2ac03c740 Update to v3 2020-09-08 21:25:47 +00:00
Andi Li
06989d7897 Update documentation.
Minor cleanup and change default fail policy and timeout on webhook
config.
2020-08-28 12:06:28 -04:00
Andi Li
42b6b374cf Add phase 1 of validation tightening.
https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/177-volume-snapshot/tighten-validation-webhook-crd.md

1. Ratcheting validation webhook server image
2. Controller labels invalid objects
3. Unit tests for webhook
4. Deployment README and example deployment method with certs
5. Update top-level README

Racheting validation:
1. webhook is strict on create
2. webhook is strict on updates where the existing object passes strict validation
3. webhook is relaxed on updates where the existing object fails strict validation (allows finalizer removal, status update, deletion, etc)

Additionally the validating wehook server will perform immutability
checks on scenario 2 above.
2020-08-27 20:34:21 -04:00