Add validation webhook for Namespace deletion (#326)

Signed-off-by: Tamal Saha <tamal@appscode.com>
kubedb · Oct 3, 2018 · 6c8c232 · 6c8c232
1 parent f94b14e
commit 6c8c232
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 0 deletions.
diff --git a/chart/kubedb/templates/validating-webhook.yaml b/chart/kubedb/templates/validating-webhook.yaml
@@ -129,4 +129,17 @@ webhooks:
     resources: ["dormantdatabases"]
     operations: ["CREATE", "UPDATE", "DELETE"]
   failurePolicy: Fail
+- name: namespaces.validators.kubedb.com
+  clientConfig:
+    service:
+      namespace: default
+      name: kubernetes
+      path: /apis/validators.kubedb.com/v1alpha1/namespaces
+    caBundle: {{ b64enc .Values.apiserver.ca }}
+  rules:
+  - apiGroups: [""]
+    apiVersions: ["*"]
+    resources: ["namespaces"]
+    operations: ["DELETE"]
+  failurePolicy: Fail
 {{ end }}
diff --git a/hack/deploy/validating-webhook.yaml b/hack/deploy/validating-webhook.yaml
@@ -123,3 +123,16 @@ webhooks:
     resources: ["dormantdatabases"]
     operations: ["CREATE", "UPDATE", "DELETE"]
   failurePolicy: Fail
+- name: namespaces.validators.kubedb.com
+  clientConfig:
+    service:
+      namespace: default
+      name: kubernetes
+      path: /apis/validators.kubedb.com/v1alpha1/namespaces
+    caBundle: ${KUBE_CA}
+  rules:
+  - apiGroups: [""]
+    apiVersions: ["*"]
+    resources: ["namespaces"]
+    operations: ["DELETE"]
+  failurePolicy: Fail