immutable field: "mode"

api/v1alpha1/irsasetup_types.go

@@ -52,6 +52,7 @@ type IRSASetupSpec struct {
 
 // +kubebuilder:default=selfhosted
 // +kubebuilder:validation:Enum=selfhosted;eks
+// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
 type SetupMode string
 
 const (

charts/irsa-manager/crds/irsasetup-crd.yaml

@@ -82,6 +82,9 @@ spec:
                 - selfhosted
                 - eks
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               provider:
                 description: |-
                   IamOIDCProvider configures IAM OIDC IamOIDCProvider Name

charts/irsa-manager/templates/deployment.yaml

@@ -71,5 +71,7 @@ spec:
           | nindent 10 }}
       securityContext:
         runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: {{ include "irsa-manager.fullname" . }}-controller-manager
       terminationGracePeriodSeconds: 10

config/crd/bases/irsa-manager.kkb0318.github.io_irsasetups.yaml

@@ -83,6 +83,9 @@ spec:
                 - selfhosted
                 - eks
                 type: string
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               provider:
                 description: |-
                   IamOIDCProvider configures IAM OIDC IamOIDCProvider Name