-
Notifications
You must be signed in to change notification settings - Fork 451
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add resource size validator #2781
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/assign
Love it - very clean, easy-to-follow and easy-to-read PR, thanks a lot.
pkg/controllermanager/apis/config/validation/ControllerManagerConfiguration.go
Outdated
Show resolved
Hide resolved
pkg/controllermanager/server/handlers/webhooks/validate_resource_size.go
Outdated
Show resolved
Hide resolved
pkg/controllermanager/server/handlers/webhooks/validate_resource_size.go
Outdated
Show resolved
Hide resolved
...gardener/controlplane/charts/application/templates/validatingwebhook-controller-manager.yaml
Outdated
Show resolved
Hide resolved
...gardener/controlplane/charts/application/templates/validatingwebhook-controller-manager.yaml
Outdated
Show resolved
Hide resolved
pkg/controllermanager/apis/config/validation/ControllerManagerConfiguration.go
Outdated
Show resolved
Hide resolved
dfc325b
to
579fa5c
Compare
Thanks for your rewiews @rfranzke @ialidzhikov. I already addressed your comments but as discussed in our internal meeting, I'll continue to move out the webhooks to a dedicated component so that we have:
|
579fa5c
to
a98e6ee
Compare
Please update the PR now that #2832 is merged :) |
pkg/admissioncontroller/apis/config/validation/controllerManagerConfiguration.go
Outdated
Show resolved
Hide resolved
pkg/admissioncontroller/apis/config/validation/controllerManagerConfiguration_test.go
Outdated
Show resolved
Hide resolved
pkg/admissioncontroller/apis/config/validation/controllerManagerConfiguration_test.go
Outdated
Show resolved
Hide resolved
pkg/admissioncontroller/apis/config/validation/validation_suite_test.go
Outdated
Show resolved
Hide resolved
pkg/admissioncontroller/server/handlers/webhooks/webhooks_suite_test.go
Outdated
Show resolved
Hide resolved
a98e6ee
to
87272f1
Compare
/unhold |
pkg/admissioncontroller/apis/config/validation/admissionControllerConfiguration.go
Outdated
Show resolved
Hide resolved
pkg/admissioncontroller/apis/config/validation/admissionControllerConfiguration_test.go
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
cfc47a7
to
a616688
Compare
a616688
to
42709f9
Compare
Thanks @rfranzke, I force pushed again to squash the commits. |
pkg/admissioncontroller/server/handlers/webhooks/validate_resource_size.go
Show resolved
Hide resolved
Thanks @ialidzhikov for the feedback. PTAL. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
/lgtm
How to categorize this PR?
/area security
/kind enhancement
/priority normal
What this PR does / why we need it:
This PR adds the Resource Size Validator which is a webook for GCM and can be used to restrict the size of resources applied by end users. Please consult the enclosed documentation
docs/concepts/controller-manager.md
for more details.Which issue(s) this PR fixes:
Fixes parts of #1650
Release note: