v1alpha1

type AuditEventCustomValidator ¶

type AuditEventCustomValidator struct{}

AuditEventCustomValidator enforces the write-once invariant and shape-checks the spec on create. See ADR-0016.

func (v *AuditEventCustomValidator) ValidateCreate(_ context.Context, ae *paddockv1alpha1.AuditEvent) (admission.Warnings, error)

func (v *AuditEventCustomValidator) ValidateDelete(_ context.Context, _ *paddockv1alpha1.AuditEvent) (admission.Warnings, error)

func (v *AuditEventCustomValidator) ValidateUpdate(_ context.Context, oldAE, newAE *paddockv1alpha1.AuditEvent) (admission.Warnings, error)

type BrokerPolicyCustomValidator ¶

type BrokerPolicyCustomValidator struct {
	Sink auditing.Sink
}

BrokerPolicyCustomValidator enforces BrokerPolicy spec invariants:

• appliesToTemplates has at least one entry;
• every grant has the fields its provider kind requires;
• UserSuppliedSecret declares deliveryMode (proxyInjected or inContainer);
• built-in providers do not set deliveryMode;
• credential names are unique within the policy;
• egress hosts are non-empty and wildcard-valid;
• every proxy-injected host is covered by an egress grant;
• git repo tuples are complete;
• spec.interception, when present, has exactly one of transparent or cooperativeAccepted (with accepted=true and a written reason);
• spec.egressDiscovery, when present, has accepted=true, a reason ≥20 chars, and expiresAt in (now, now+7d].

Sink receives one AuditEvent per admission decision; a nil Sink is treated as a no-op (fail-open: audit unavailability never blocks admission).

func (v *BrokerPolicyCustomValidator) ValidateCreate(ctx context.Context, bp *paddockv1alpha1.BrokerPolicy) (admission.Warnings, error)

func (v *BrokerPolicyCustomValidator) ValidateDelete(_ context.Context, _ *paddockv1alpha1.BrokerPolicy) (admission.Warnings, error)

func (v *BrokerPolicyCustomValidator) ValidateUpdate(ctx context.Context, _, newBP *paddockv1alpha1.BrokerPolicy) (admission.Warnings, error)

type ClusterHarnessTemplateCustomValidator ¶

type ClusterHarnessTemplateCustomValidator struct{}

ClusterHarnessTemplateCustomValidator validates a ClusterHarnessTemplate on admission. A cluster-scoped template must carry its own pod shape and cannot inherit — see docs/contributing/adr/0003-template-override-semantics.md.

func (v *ClusterHarnessTemplateCustomValidator) ValidateCreate(_ context.Context, tpl *paddockv1alpha1.ClusterHarnessTemplate) (admission.Warnings, error)

func (v *ClusterHarnessTemplateCustomValidator) ValidateDelete(_ context.Context, _ *paddockv1alpha1.ClusterHarnessTemplate) (admission.Warnings, error)

func (v *ClusterHarnessTemplateCustomValidator) ValidateUpdate(_ context.Context, _, newTpl *paddockv1alpha1.ClusterHarnessTemplate) (admission.Warnings, error)

type HarnessRunCustomValidator ¶

type HarnessRunCustomValidator struct {
	Client client.Client
	Sink   auditing.Sink
}

HarnessRunCustomValidator enforces HarnessRun spec invariants:

• exactly one of spec.prompt or spec.promptFrom;
• spec.templateRef.name non-empty;
• spec.extraEnv values do not use valueFrom in any shape (v0.3: runtime-resolved env values must flow through the broker or an explicit spec field; see ADR-0015 and spec 0002 §5.4);
• spec immutable after creation;
• (v0.3, M2 placeholder) the referenced template must not declare a non-empty requires block until the broker lands in M3. Admission against such templates is rejected with a clear diagnostic; the full BrokerPolicy intersection algorithm replaces this check in M3 (ADR-0014).

Client is optional — test code constructs the validator without one, which skips the cross-object requires check. Production installs always wire the manager's client via SetupHarnessRunWebhookWithManager. Sink receives one AuditEvent per admission decision; a nil Sink is treated as a no-op (fail-open: audit unavailability never blocks admission).

func (v *HarnessRunCustomValidator) ValidateCreate(ctx context.Context, run *paddockv1alpha1.HarnessRun) (admission.Warnings, error)

func (v *HarnessRunCustomValidator) ValidateDelete(_ context.Context, _ *paddockv1alpha1.HarnessRun) (admission.Warnings, error)

func (v *HarnessRunCustomValidator) ValidateUpdate(ctx context.Context, oldRun, newRun *paddockv1alpha1.HarnessRun) (admission.Warnings, error)

type HarnessTemplateCustomValidator ¶

type HarnessTemplateCustomValidator struct{}

HarnessTemplateCustomValidator validates a HarnessTemplate on admission. See docs/contributing/adr/0003-template-override-semantics.md for rules.

func (v *HarnessTemplateCustomValidator) ValidateCreate(_ context.Context, tpl *paddockv1alpha1.HarnessTemplate) (admission.Warnings, error)

func (v *HarnessTemplateCustomValidator) ValidateDelete(_ context.Context, _ *paddockv1alpha1.HarnessTemplate) (admission.Warnings, error)

func (v *HarnessTemplateCustomValidator) ValidateUpdate(_ context.Context, _, newTpl *paddockv1alpha1.HarnessTemplate) (admission.Warnings, error)

type WorkspaceCustomValidator ¶

type WorkspaceCustomValidator struct{}

WorkspaceCustomValidator enforces Workspace spec invariants:

• spec.storage.size must be > 0;
• if spec.seed is set, exactly one seed source is selected;
• spec.storage and spec.seed are immutable after creation.

func (v *WorkspaceCustomValidator) ValidateCreate(_ context.Context, ws *paddockv1alpha1.Workspace) (admission.Warnings, error)

func (v *WorkspaceCustomValidator) ValidateDelete(_ context.Context, _ *paddockv1alpha1.Workspace) (admission.Warnings, error)

func (v *WorkspaceCustomValidator) ValidateUpdate(_ context.Context, oldWS, newWS *paddockv1alpha1.Workspace) (admission.Warnings, error)