validate disable security

Signed-off-by: SK Ali Arman <[email protected]>
kubedb · Sep 10, 2024 · 084b268 · 084b268
1 parent 0a3c137
commit 084b268
Show file tree

Hide file tree

Showing 3 changed files with 51 additions and 0 deletions.
diff --git a/apis/kubedb/v1alpha2/clickhouse_webhook.go b/apis/kubedb/v1alpha2/clickhouse_webhook.go
@@ -96,6 +96,15 @@ func (c *ClickHouse) ValidateCreateOrUpdate() error {
 		}
 	}
 
+	if c.Spec.DisableSecurity {
+		if c.Spec.AuthSecret != nil {
+			allErr = append(allErr, field.Invalid(field.NewPath("spec").Child("authSecret"),
+				c.Name,
+				"authSecret should be nil when security is disabled"))
+			return apierrors.NewInvalid(schema.GroupKind{Group: "ClickHouse.kubedb.com", Kind: "ClickHouse"}, c.Name, allErr)
+		}
+	}
+
 	if c.Spec.ClusterTopology != nil {
 		clusterName := map[string]bool{}
 		clusters := c.Spec.ClusterTopology.Cluster

diff --git a/apis/kubedb/v1alpha2/openapi_generated.go b/apis/kubedb/v1alpha2/openapi_generated.go
diff --git a/apis/kubedb/v1alpha2/zz_generated.deepcopy.go b/apis/kubedb/v1alpha2/zz_generated.deepcopy.go