Add CEL validation for target ref group

nginx · May 8, 2024 · 390fe3c · 390fe3c
1 parent 74c027a
commit 390fe3c
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 0 deletions.
diff --git a/apis/v1alpha1/clientsettingspolicy_types.go b/apis/v1alpha1/clientsettingspolicy_types.go
@@ -41,6 +41,7 @@ type ClientSettingsPolicySpec struct {
 	// Support: Gateway, HTTPRoute, GRPCRoute.
 	//
 	// +kubebuilder:validation:XValidation:message="TargetRef Kind must be one of: Gateway, HTTPRoute, or GRPCRoute",rule="(self.kind=='Gateway' || self.kind=='HTTPRoute' || self.kind=='GRPCRoute')"
+	// +kubebuilder:validation:XValidation:message="TargetRef Group must be gateway.networking.k8s.io.",rule="(self.group=='gateway.networking.k8s.io')"
 	//nolint:lll
 	TargetRef gatewayv1alpha2.PolicyTargetReference `json:"targetRef"`
 

diff --git a/config/crd/bases/gateway.nginx.org_clientsettingspolicies.yaml b/config/crd/bases/gateway.nginx.org_clientsettingspolicies.yaml
@@ -153,6 +153,8 @@ spec:
                 - message: 'TargetRef Kind must be one of: Gateway, HTTPRoute, or
                     GRPCRoute'
                   rule: (self.kind=='Gateway' || self.kind=='HTTPRoute' || self.kind=='GRPCRoute')
+                - message: TargetRef Group must be gateway.networking.k8s.io.
+                  rule: (self.group=='gateway.networking.k8s.io')
             required:
             - targetRef
             type: object

diff --git a/deploy/crds.yaml b/deploy/crds.yaml
@@ -152,6 +152,8 @@ spec:
                 - message: 'TargetRef Kind must be one of: Gateway, HTTPRoute, or
                     GRPCRoute'
                   rule: (self.kind=='Gateway' || self.kind=='HTTPRoute' || self.kind=='GRPCRoute')
+                - message: TargetRef Group must be gateway.networking.k8s.io.
+                  rule: (self.group=='gateway.networking.k8s.io')
             required:
             - targetRef
             type: object