Files
capsule/internal/webhook/cfg/handler.go
T
Oliver BählerandGitHub 0b11582e4a feat: add scheduler enforcement rule (#1971)
* fix(controller): decode old object for delete requests

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: modernize golang

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: modernize golang

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* chore: modernize golang

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* fix: preserve ca-bundles injected from external providers

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: abstract ruling

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: migrate events api

* feat: migrate events api

* feat: migrate events api

* feat: migrate events api

* feat: migrate events  api

* feat: migrate events api

* feat: migrate events api

* feat: migrate events api

* feat: migrate events api

* feat: migrate events api

---------

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>
Signed-off-by: Oliver Baehler <oliver@sudo-i.net>
2026-06-19 14:34:16 +02:00

103 lines
2.7 KiB
Go

// Copyright 2020-2026 Project Capsule Authors
// SPDX-License-Identifier: Apache-2.0
package cfg
import (
"context"
"sigs.k8s.io/controller-runtime/pkg/client"
"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
capsulev1beta2 "github.com/projectcapsule/capsule/api/v1beta2"
ad "github.com/projectcapsule/capsule/pkg/runtime/admission"
"github.com/projectcapsule/capsule/pkg/runtime/configuration"
"github.com/projectcapsule/capsule/pkg/runtime/events"
"github.com/projectcapsule/capsule/pkg/runtime/handlers"
)
func Handler(configuration configuration.Configuration, handlers ...handlers.TypedHandler[*capsulev1beta2.CapsuleConfiguration]) handlers.Handler {
return &handler{
cfg: configuration,
handlers: handlers,
}
}
type handler struct {
cfg configuration.Configuration
handlers []handlers.TypedHandler[*capsulev1beta2.CapsuleConfiguration]
}
//nolint:dupl
func (h *handler) OnCreate(
c client.Client,
reader client.Reader,
decoder admission.Decoder,
recorder events.EventRecorder,
) handlers.Func {
return func(ctx context.Context, req admission.Request) *admission.Response {
config := &capsulev1beta2.CapsuleConfiguration{}
if err := decoder.Decode(req, config); err != nil {
return ad.ErroredResponse(err)
}
for _, hndl := range h.handlers {
if response := hndl.OnCreate(c, reader, config, decoder, recorder)(ctx, req); response != nil {
return response
}
}
return nil
}
}
//nolint:dupl
func (h *handler) OnDelete(
c client.Client,
reader client.Reader,
decoder admission.Decoder,
recorder events.EventRecorder,
) handlers.Func {
return func(ctx context.Context, req admission.Request) *admission.Response {
config := &capsulev1beta2.CapsuleConfiguration{}
if err := decoder.Decode(req, config); err != nil {
return ad.ErroredResponse(err)
}
for _, hndl := range h.handlers {
if response := hndl.OnDelete(c, reader, config, decoder, recorder)(ctx, req); response != nil {
return response
}
}
return nil
}
}
func (h *handler) OnUpdate(
c client.Client,
reader client.Reader,
decoder admission.Decoder,
recorder events.EventRecorder,
) handlers.Func {
return func(ctx context.Context, req admission.Request) *admission.Response {
config := &capsulev1beta2.CapsuleConfiguration{}
if err := decoder.Decode(req, config); err != nil {
return ad.ErroredResponse(err)
}
old := &capsulev1beta2.CapsuleConfiguration{}
if err := decoder.DecodeRaw(req.OldObject, old); err != nil {
return ad.ErroredResponse(err)
}
for _, hndl := range h.handlers {
if response := hndl.OnUpdate(c, reader, config, old, decoder, recorder)(ctx, req); response != nil {
return response
}
}
return nil
}
}