capsule/pkg/runtime/predicates/promoted_serviceaccount.go

// Copyright 2020-2026 Project Capsule Authors
// SPDX-License-Identifier: Apache-2.0

package predicates

import (
	"sigs.k8s.io/controller-runtime/pkg/event"

	"github.com/projectcapsule/capsule/pkg/api/meta"
	"github.com/projectcapsule/capsule/pkg/utils"
)

type PromotedServiceaccountPredicate struct{}

func (PromotedServiceaccountPredicate) Generic(event.GenericEvent) bool { return false }

func (PromotedServiceaccountPredicate) Create(e event.CreateEvent) bool {
	if e.Object == nil {
		return false
	}

	if v := e.Object.GetLabels()[meta.OwnerPromotionLabel]; v == meta.ValueTrue {
		return true
	}

	if v := e.Object.GetLabels()[meta.ServiceAccountPromotionLabel]; v == meta.ValueTrue {
		return true
	}

	return false
}

func (PromotedServiceaccountPredicate) Delete(e event.DeleteEvent) bool {
	if e.Object == nil {
		return false
	}

	if v := e.Object.GetLabels()[meta.OwnerPromotionLabel]; v == meta.ValueTrue {
		return true
	}

	if v := e.Object.GetLabels()[meta.ServiceAccountPromotionLabel]; v == meta.ValueTrue {
		return true
	}

	return false
}

func (PromotedServiceaccountPredicate) Update(e event.UpdateEvent) bool {
	if e.ObjectOld == nil || e.ObjectNew == nil {
		return false
	}

	if !utils.MapEqual(e.ObjectOld.GetLabels(), e.ObjectNew.GetLabels()) {
		return true
	}

	return false
}