digitalocean / digitalocean/do-operator

Database operator admission webhook is too strict

Open
#58 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
Go
Stars
95
Forks
10
Avg merge
9h 30m
Merged PRs (30d)
1

Description

Currently an attempt to create a `DatabaseUser` when a cluster resource does not exist results in an error as such:
```
Error from server (Forbidden): error when creating "sample.yaml": admission webhook "vdatabaseuser.kb.io" denied the request: spec.cluster: Not found: default/my-app-db
```

While reasonable, it creates issues with automations such as helm/kustomize (and by extension GitOps solutions) because it creates chicken and egg problem between `DatabaseCluster` and `DatabaseUser` resource.

If the check, rather than being done during admission, was done by operator itself during resource handling it would allow for the usual Kubernetes eventually consistent workflow with resources at some point arriving at desired state.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.