Azure / azure-service-operator

Azure Service Operator allows you to create Azure resources using kubectl
https://azure.github.io/azure-service-operator/
MIT License
738 stars 194 forks source link

Use CEL + Swagger x-ms-mutability to prevent changes to write-once properties #1443

Open Porges opened 4 years ago

Porges commented 4 years ago

Some ARM templates have properties that can be set on creation but not modified later. What do we do about these? Does Kubernetes have support/concepts that match this?

matthchr commented 4 years ago

I noticed that Crossplane has an annotation +immutable, and Kubernetes seems to discuss this exact annotation here

bergerx commented 3 years ago

New place for the kep is here: https://github.com/kubernetes/enhancements/tree/master/keps/sig-api-machinery/1101-immutable-fields#suggested-marker-syntax

matthchr commented 2 years ago

Still something we should consider

matthchr commented 2 years ago

Still tracking this but as far as I can tell no movement upstream, so we'll sit on this some more. It's not an issue in practice for us right now.

matthchr commented 1 year ago

No status change from August when we visited this issue last.

theunrepentantgeek commented 1 year ago

No change. Still something we need to sort.

matthchr commented 1 year ago

No change from above. Looks like the KEP is stalled.

matthchr commented 7 months ago

See https://kubernetes.io/blog/2022/09/23/crd-validation-rules-beta/ and https://github.com/google/cel-spec

matthchr commented 7 months ago

still interesting

matthchr commented 1 month ago

This is still interesting but not really that critical (which is why it keeps lingering in this list).