Add finalizer for RemoteUser

syngit-org · Jul 2, 2024 · efe89a9 · efe89a9
1 parent 7285eb5
commit efe89a9
Show file tree

Hide file tree

Showing 6 changed files with 174 additions and 6 deletions.
diff --git a/api/v1alpha2/remoteuser_webhook.go b/api/v1alpha2/remoteuser_webhook.go
@@ -23,6 +23,7 @@ import (
 	corev1 "k8s.io/api/core/v1"
 	rbacv1 "k8s.io/api/rbac/v1"
 	apierrors "k8s.io/apimachinery/pkg/api/errors"
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 	"k8s.io/apimachinery/pkg/runtime"
 	"k8s.io/apimachinery/pkg/types"
 	"k8s.io/apimachinery/pkg/util/validation/field"
@@ -122,9 +123,23 @@ func (ruwh *RemoteUserWebhookHandler) Handle(ctx context.Context, req admission.
 	err = ruwh.Client.Get(ctx, *webhookNamespacedName, rub)
 	if err != nil {
 		// The RemoteUserBinding does not exists yet
+
+		// Create the RemoteUserBinding object
 		rub.Name = name
 		rub.Namespace = req.Namespace
 
+		isControlled := true
+		ownerRef := v1.OwnerReference{
+			Name:       ru.Name,
+			APIVersion: ru.APIVersion,
+			Kind:       ru.GroupVersionKind().Kind,
+			UID:        ru.GetUID(),
+			Controller: &isControlled,
+		}
+		ownerRefs := make([]v1.OwnerReference, 0)
+		ownerRefs = append(ownerRefs, ownerRef)
+		rub.ObjectMeta.OwnerReferences = ownerRefs
+
 		subject := &rbacv1.Subject{
 			Kind: "User",
 			Name: username,
@@ -142,6 +157,19 @@ func (ruwh *RemoteUserWebhookHandler) Handle(ctx context.Context, req admission.
 	} else {
 		// The RemoteUserBinding already exists
 
+		// Update the list of the RemoteUserBinding object
+		isControlled := true
+		ownerRef := v1.OwnerReference{
+			Name:       ru.Name,
+			APIVersion: ru.APIVersion,
+			Kind:       ru.GroupVersionKind().Kind,
+			UID:        ru.GetUID(),
+			Controller: &isControlled,
+		}
+		ownerRefs := make([]v1.OwnerReference, 0)
+		ownerRefs = append(ownerRefs, ownerRef)
+		rub.ObjectMeta.OwnerReferences = ownerRefs
+
 		remoteRefs := rub.DeepCopy().Spec.RemoteRefs
 		remoteRefs = append(remoteRefs, objRef)
 		rub.Spec.RemoteRefs = remoteRefs

diff --git a/config/webhook/manifests.yaml b/config/webhook/manifests.yaml
@@ -7,6 +7,7 @@ webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
+    caBundle: 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
     service:
       name: webhook-service
       namespace: system
@@ -27,10 +28,11 @@ webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
+    caBundle: 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
     service:
       name: webhook-service
       namespace: system
-      path: /validate-ssyngit-damsien-fr-v1alpha2-remoteuser
+      path: /validate-syngit-damsien-fr-v1alpha2-remoteuser
   failurePolicy: Fail
   name: vremoteuser.kb.io
   rules:
@@ -47,10 +49,11 @@ webhooks:
 - admissionReviewVersions:
   - v1
   clientConfig:
+    caBundle: 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
     service:
       name: webhook-service
       namespace: system
-      path: /validate-syngit-remoteuser-owner
+      path: /reconcile-syngit-remoteuser-owner
   failurePolicy: Fail
   name: vremoteusers-owner.kb.io
   rules:

diff --git a/config/webhook/manifests.yaml.temp b/config/webhook/manifests.yaml.temp
@@ -0,0 +1,68 @@
+---
+apiVersion: admissionregistration.k8s.io/v1
+kind: ValidatingWebhookConfiguration
+metadata:
+  name: validating-webhook-configuration
+webhooks:
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURyVENDQXBXZ0F3SUJBZ0lVUjJ5TDF6R0FNdVdvWTJiTmtBRkNTYVIxR1Znd0RRWUpLb1pJaHZjTkFRRUwKQlFBd0tqRUxNQWtHQTFVRUJoTUNRVlV4R3pBWkJnTlZCQU1NRW5kbFltaHZiMnN0YzJWeWRtbGpaUzFEUVRBZQpGdzB5TkRBM01ESXhPVEV5TVRoYUZ3MHlOVEEzTURJeE9URXlNVGhhTUM0eEN6QUpCZ05WQkFZVEFrRlZNUjh3CkhRWURWUVFEREJaM1pXSm9iMjlyTFhObGNuWnBZMlV0WTJ4cFpXNTBNSUlCSWpBTkJna3Foa2lHOXcwQkFRRUYKQUFPQ0FROEFNSUlCQ2dLQ0FRRUFyWUhUbGFJQ3l5ejlXZWExd0ROVXR5Y0hNdUk4Y2diSGorSis2cFVUVDRodwpVSjBkNGRqZmo5ZHFIUS9TYlpSTTVNZVVDT1BPWmZGbi9ESGpvVXpzU2xpc1JVUW4xWUJHNHEwQWxaUWI4bWV2CnRpcHZkSnFNOHlRSEsyMmE2ZnRXR3pRWUVYRndpMVpNTHk0MDBIeGprRGJSdTZ5YnRJRkZOMllQYWR0S092Q1cKWWRhS3lDeVdPdFZsMlB0YjN1L1pseFZmUDFPOHRNdmIxcDhNMGNGbkJIYXFmWFRNaVZ4eExPQnQ1cklDUllJcQpUVHlick5LdFFKWmo2S05Nd08rQWFsNU02YmczV1pWd3hLSXpPcXk3dFZrdk1ONWNFamVtNzZielFOekJWNFdJCjhQRllUM1RHTjNyVGFwVFU0MzRpSWVOOVdwbE9YY1o1d1pPcVlrQmxXUUlEQVFBQm80SEdNSUhETUlHQUJnTlYKSFJFRWVUQjNnalJ1WlhjdGIzQmxjbUYwYjNJdGQyVmlhRzl2YXkxelpYSjJhV05sTG01bGR5MXZjR1Z5WVhSdgpjaTF6ZVhOMFpXMHVjM1pqZ2pseVpYTnZkWEpqWlhNdGFXNTBaWEpqWlhCMGIzSXRkMlZpYUc5dmF5MXpaWEoyCmFXTmxMbTl3WlhKaGRHOXlMWE41YzNSbGJTNXpkbU9IQkt3UkFBRXdIUVlEVlIwT0JCWUVGS09XNE9aQ0Y5V1kKbTlLZnJjbDM1Yy9RSkk3Qk1COEdBMVVkSXdRWU1CYUFGUE9COFk1bUhYZkRlblNhd01QNzUyWnJsQ0laTUEwRwpDU3FHU0liM0RRRUJDd1VBQTRJQkFRQjdyNnNvYzdreXcxc3A0VkJGdHVhcnY0WUVSb0NxNldHZW44OFFkSktFClFkbzVSSjJ6eGk2dW1GSFdKdGxKbGRObFRmMzlucVVudmxObnlLbVZOMEFJeDdoem9pM0FhQkxVeEJ3aDFRVkUKWTJ2OHZwVUNIdEpock1GYW1IQmcraVo3cW9vQUFTVW5Hd3V2YkpJS1hQaXZ6MG9QSm1WZGRVVkJxOGYrL3NxQgpKc0FSd2hUUEZZajVPdlZZcWpZTXFhZDZrRXo0TlNwQ0o0RDJtYnV2VmhrSzJtUjJvTk1oUUduR0xhSnZGQkRYCjVCcVROSUZNajBBM2lSVGtSaHF2MXdQeDhaUnpNSGZIVThPc2wzMFp6WDhuUDkwNnl0ZFF5d3NuNFF1OHY2S2oKNnMyanM4MDlFdUlWYisrcks4Q3BqNDErdk5mZHdlUTFEbWlkNml6bHJ3M3MKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
+    service:
+      name: webhook-service
+      namespace: system
+      path: /validate-syngit-damsien-fr-v1alpha2-remotesyncer
+  failurePolicy: Fail
+  name: vremotesyncer.kb.io
+  rules:
+  - apiGroups:
+    - syngit.damsien.fr
+    apiVersions:
+    - v1alpha2
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - remotesyncers
+  sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    caBundle: 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
+    service:
+      name: webhook-service
+      namespace: system
+      path: /validate-syngit-damsien-fr-v1alpha2-remoteuser
+  failurePolicy: Fail
+  name: vremoteuser.kb.io
+  rules:
+  - apiGroups:
+    - syngit.damsien.fr
+    apiVersions:
+    - v1alpha2
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - remoteusers
+  sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    caBundle: 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
+    service:
+      name: webhook-service
+      namespace: system
+      path: /reconcile-syngit-remoteuser-owner
+  failurePolicy: Fail
+  name: vremoteusers-owner.kb.io
+  rules:
+  - apiGroups:
+    - syngit.damsien.fr
+    apiVersions:
+    - v1alpha2
+    operations:
+    - CREATE
+    resources:
+    - remoteusers
+  sideEffects: None