Add resources sync configuration (#431)

* Add resources sync configuration Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * update docs Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * wsl Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * wsl Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * refactor cluster sync Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * wsl Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * more fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * simplify the syncerContext Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * simplify the syncerContext Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * drop the ClusterClient struct Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Fix updates to syncer Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * lint Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * refactor secrets/configmaps sync Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * refactor secrets/configmaps sync Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * docs Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * Add imagepullsecret translation Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix test Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * add exception for deleted resources Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * linting fixes Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * remove the option to disable imagepullsecret translation Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> * fix Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com> --------- Signed-off-by: galal-hussein <hussein.galal.ahmed.11@gmail.com>
2026-05-05 00:46:45 +00:00 · 2025-09-01 14:34:29 +03:00
parent b3f7a8ab7f
commit caf785f23b
28 changed files with 2651 additions and 919 deletions
--- a/pkg/controller/cluster/agent/shared.go
+++ b/pkg/controller/cluster/agent/shared.go
@@ -367,6 +367,11 @@ func (s *SharedAgent) role(ctx context.Context) error {
 				Resources: []string{"persistentvolumeclaims", "pods", "pods/log", "pods/attach", "pods/exec", "pods/ephemeralcontainers", "secrets", "configmaps", "services"},
 				Verbs:     []string{"*"},
 			},
+			{
+				APIGroups: []string{"networking.k8s.io"},
+				Resources: []string{"ingresses"},
+				Verbs:     []string{"*"},
+			},
 			{
 				APIGroups: []string{"k3k.io"},
 				Resources: []string{"clusters"},
--- a/pkg/controller/cluster/cluster.go
+++ b/pkg/controller/cluster/cluster.go
@@ -718,6 +718,11 @@ func (c *ClusterReconciler) validate(cluster *v1alpha1.Cluster, policy v1alpha1.
 		}
 	}

+	// validate sync policy
+	if !equality.Semantic.DeepEqual(cluster.Spec.Sync, policy.Spec.Sync) {
+		return fmt.Errorf("sync configuration %v is not allowed by the policy %q", cluster.Spec.Sync, policy.Name)
+	}
+
 	return nil
 }