feat: add metadata enforcement (#1990)

* fix(controller): decode old object for delete requests Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: modernize golang Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: modernize golang Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * chore: modernize golang Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> * fix: preserve ca-bundles injected from external providers Signed-off-by: Oliver Baehler <oliver@sudo-i.net> * feat: add metadata enforcement Signed-off-by: Oliver Baehler <oliver@sudo-i.net> * feat: add metadata enforcement Signed-off-by: Oliver Baehler <oliver@sudo-i.net> * fix: add resourcepoolclaim validation Signed-off-by: Oliver Baehler <oliver@sudo-i.net> * fix: add resourcepoolclaim validation Signed-off-by: Oliver Baehler <oliver@sudo-i.net> * fix: add resourcepoolclaim validation Signed-off-by: Oliver Baehler <oliver@sudo-i.net> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * fix: add resourcepoolclaim validation Signed-off-by: Oliver Baehler <oliver@sudo-i.net> --------- Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com> Signed-off-by: Oliver Baehler <oliver@sudo-i.net> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-08-19 12:36:39 +00:00 · 2026-07-02 13:42:08 +02:00
parent 6fbd472f27
commit 77d1810bb9
89 changed files with 12731 additions and 556 deletions
@@ -105,6 +105,35 @@ spec:
          ports:
            - from: 30000
              to: 32767
+  - enforce:
+      action: "allow"
+      # generic:
+      #   - kinds:
+      #       - "ConfigMap"
+      #     path: ".data.key"
+      #     entity: "Any/TenantOwner/CapsuleUser"
+      #     operator: "Equals/Truthy"
+      #     values:
+      #       - exact:
+      #         - "sad"
+      #         from: ".status.classes.ingress"
+      metadata:
+        - kinds:
+            - "ConfigMap"
+          labels:
+            "corp.com/tenant":
+              required: true
+              values:
+                - exact:
+                    - test
+          annotations:
+            "example.corp/cost-center":
+              required: true
+              values:
+                - exp: "^INV-[0-9]{4}$"
+                  exact:
+                    - prod
+                    - test
 ---
 apiVersion: capsule.clastix.io/v1beta2
 kind: Tenant