Skip to main content

Browse the archive

Revision 17882e96de339905ecf46c0146e2dc6bda9f6158 authored by Casey Callendrello on 22 May 2024, 18:36:48 UTC, committed by Casey Callendrello on 10 June 2024, 15:49:28 UTC 
policy/api: add more CRD validations
 
Copying some logic from `Sanitize()` in to CRD validations:
- use the OpenAPI `cidr` format directly, remove baroque regex
- add OneOf for FQDN selector pattern vs. name
- add pre-existing MaxItems for port & ICMP rules
- add OneOf for L7 filter types

None of these add any new restrictions; they were always in the policy
engine. Now these validation errors will be caught by the apiserver.

Signed-off-by: Casey Callendrello <cdc@isovalent.com>
1 parent fdc9bf9
Raw File
VERSION 
1.16.0-dev
back to top