Make webhook mode configurable.

metal-stack · Nov 8, 2023 · 3c1ef36 · 3c1ef36
1 parent a8b71e2
commit 3c1ef36
Show file tree

Hide file tree

Showing 5 changed files with 79 additions and 636 deletions.
diff --git a/example/shoot.yaml b/example/shoot.yaml
@@ -16,11 +16,12 @@ spec:
     providerConfig:
       apiVersion: audit.metal.extensions.gardener.cloud/v1alpha1
       kind: AuditConfig
+      webhookMode: blocking
       backends:
         log:
           enabled: true
         clusterForwarding:
-          enabled: true
+          enabled: false
       # persistence:
       #   size: 10Gi
       # auditPolicy: |

diff --git a/pkg/apis/audit/types.go b/pkg/apis/audit/types.go
@@ -4,6 +4,16 @@ import (
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
+const (
+	AuditWebhookModeBatch          AuditWebhookMode = "batch"
+	AuditWebhookModeBlocking       AuditWebhookMode = "blocking"
+	AuditWebhookModeBlockingStrict AuditWebhookMode = "blocking-strict"
+)
+
+type (
+	AuditWebhookMode string
+)
+
 // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
 
 // AuditConfig configuration resource
@@ -12,6 +22,8 @@ type AuditConfig struct {
 
 	Persistence *AuditPersistence
 
+	WebhookMode AuditWebhookMode
+
 	AuditPolicy *string
 
 	Backends *AuditBackends

diff --git a/pkg/apis/audit/v1alpha1/types.go b/pkg/apis/audit/v1alpha1/types.go
@@ -9,6 +9,14 @@ const (
 	ShootAuditResourceName = "extension-audit-shoot"
 
 	ShootAudittailerNamespace = "audit"
+
+	AuditWebhookModeBatch          AuditWebhookMode = "batch"
+	AuditWebhookModeBlocking       AuditWebhookMode = "blocking"
+	AuditWebhookModeBlockingStrict AuditWebhookMode = "blocking-strict"
+)
+
+type (
+	AuditWebhookMode string
 )
 
 // +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
@@ -19,6 +27,8 @@ type AuditConfig struct {
 
 	Persistence *AuditPersistence `json:"persistence,omitempty"`
 
+	WebhookMode AuditWebhookMode `json:"webhookMode,omitempty"`
+
 	AuditPolicy *string `json:"auditPolicy,omitempty"`
 
 	Backends *AuditBackends `json:"backends,omitempty"`

diff --git a/pkg/apis/audit/v1alpha1/zz_generated.conversion.go b/pkg/apis/audit/v1alpha1/zz_generated.conversion.go