Validation

A CRD's openAPIV3Schema validates on the API server: types, required fields, limits, allowed values. An invalid object is rejected before being saved; the controller is spared from dealing with broken data:

spec:
  type: object
  required: [veritabani, takvim]
  properties:
    veritabani: {type: string, minLength: 1}
    takvim:     {type: string, pattern: "^[0-9*/,-]+( [0-9*/,-]+){4}$"}
    saklamaGun: {type: integer, minimum: 1, maximum: 365, default: 7}
    tur:        {type: string, enum: [tam, artimli]}

For cross-field rules, CEL expressions (x-kubernetes-validations) are written into the validation definition. Complex validation can be done without writing a webhook:

spec:
  type: object
  x-kubernetes-validations:
    - rule: "self.tur != 'artimli' || self.saklamaGun <= 30"
      message: "artımlı yedekler en fazla 30 gün saklanır"

$ kubectl apply -f yedek.yaml
The Yedek "magaza-gece" is invalid: spec: Invalid value: artımlı yedekler en fazla 30 gün saklanır