Commit Graph

15 Commits

Author SHA1 Message Date
xing-yang
3ed4ebd3d8 Use client v7 2024-01-30 17:40:58 -05:00
Alex Kalenyuk
895dc73977 Enable prevent-volume-mode-conversion by default following k8s 1.28 release
This is beta since 1.27 so we can safely default to true, to get this new validation logic.
https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/3141-prevent-volume-mode-conversion/kep.yaml#L30

Signed-off-by: Alex Kalenyuk <akalenyu@redhat.com>
2023-12-10 14:23:29 +02:00
Rakshith R
aafc456527 add cmdline args to enable group snapshot webhooks
VolumeGroupSnapshots are still in alpha.
This commit adds cmdline args to enable group snapshot
webhooks while keeping it disbaled by default.

Signed-off-by: Rakshith R <rakshith.r.0001@gmail.com>
2023-10-17 15:51:12 +05:30
guoguangwu
62c611a51a chore: remove refs to deprecated io/ioutil 2023-06-25 11:09:17 +08:00
Rakshith R
a3cb5a927f add groupsnapshot related webhooks 2023-05-08 18:25:23 +05:30
Kubernetes Prow Robot
9ffdb95103 Merge pull request #690 from humblec/rbac
replace serviceAccountName key, rbac and cleanup in the code
2022-04-25 07:39:39 -07:00
Raunak Pradip Shah
24bbdae16f Add feature flag 2022-04-19 16:00:43 +05:30
Humble Chirammal
f30b14f8fd make use of short declaration of variables and cleanup code
Signed-off-by: Humble Chirammal <hchiramm@redhat.com>
2022-04-13 08:35:03 +05:30
Shawn Hurley
27f8d3fe72 Addressing feedback given 2022-03-29 11:36:04 -04:00
Shawn Hurley
b52d1d474a add unit test coverage for v1beta1 2022-03-25 14:18:30 -04:00
Shawn Hurley
eeb9897c67 [] Adding validation to snapshot class defaulting 2022-03-25 13:43:09 -04:00
xing-yang
7efebbedec Switch to klog/v2 2020-12-04 15:53:48 +00:00
Grant Griffiths
b457b08ffc Add certwatcher to webhook server
Signed-off-by: Grant Griffiths <grant@portworx.com>
2020-11-18 23:04:13 -08:00
Andi Li
06989d7897 Update documentation.
Minor cleanup and change default fail policy and timeout on webhook
config.
2020-08-28 12:06:28 -04:00
Andi Li
42b6b374cf Add phase 1 of validation tightening.
https://github.com/kubernetes/enhancements/blob/master/keps/sig-storage/177-volume-snapshot/tighten-validation-webhook-crd.md

1. Ratcheting validation webhook server image
2. Controller labels invalid objects
3. Unit tests for webhook
4. Deployment README and example deployment method with certs
5. Update top-level README

Racheting validation:
1. webhook is strict on create
2. webhook is strict on updates where the existing object passes strict validation
3. webhook is relaxed on updates where the existing object fails strict validation (allows finalizer removal, status update, deletion, etc)

Additionally the validating wehook server will perform immutability
checks on scenario 2 above.
2020-08-27 20:34:21 -04:00