Admission controller for configuration validation

k0sproject / k0smotron

k0smotron

https://docs.k0smotron.io/

Other

470 stars 45 forks source link

Admission controller for configuration validation #723

Open makhov opened 2 weeks ago

makhov commented 2 weeks ago

We are thinking about having an admission controller or CEL validation. In this issue, we are collecting a list of things that we should be validating:

don't allow to create k0s clusters in --single mode and with updateStrategy=Recreate
ensure kubernetes skew policy is respected
…

apedriza commented 1 day ago

CRDs validations on references to other resources within the CRD (ObjectRef exists etc...). In this way we can lighten the controller processing and help in the debugging for the user. For example: do not allow to create a JoinTokenRequest referencing a non-existent Cluster.