Skip to content

Feature Request: Support bundling Validating Admission Policy resources in registry+v1 bundles #7038

@m1kola

Description

@m1kola

Feature Request

Describe the problem you need a feature to resolve.

Validating Admission Policy API has been available in Kubernetes since v1.30. It provides great benefits to operator authors: it offers complex validations without the complexity of webhooks.

Currently Validating Admission Policy seem to be silently ignored by operator sdk tooling when building bundles. This could lead to undesired resource state for operators which rely on validating admission policies.

I would be great to enable support for validating admission policy resources in operator SDK & OLM.

Describe the solution you'd like.

  • Allow registry+v1 bundles to include ValidatingAdmissionPolicy and ValidatingAdmissionPolicyBinding.
  • When a bundle contains these resources and csv.Spec.minKubeVersion is not set or set to be less then 1.30 it should fail the build.
  • OLM should be able to handle it

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions