DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

skip IngressClassName validation when no permission on IngressClass

Browse source
This commit is contained in:
Gong Yongjie 2024-04-08 00:35:05 -04:00
parent 51c58c3f7c
commit c97e62aa01
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
internal/ingress/controller/store/store.go
View file

@ -1050,8 +1050,12 @@ func (s *k8sStore) GetService(key string) (*corev1.Service, error) {
func (s *k8sStore) GetIngressClass(ing *networkingv1.Ingress, icConfig *ingressclass.Configuration) (string, error) { func (s *k8sStore) GetIngressClass(ing *networkingv1.Ingress, icConfig *ingressclass.Configuration) (string, error) {
// First we try ingressClassName // First we try ingressClassName
if ing.Spec.IngressClassName != nil { if ing.Spec.IngressClassName != nil {
if icConfig.IgnoreIngressClass && icConfig.AnnotationValue == *ing.Spec.IngressClassName { if icConfig.IgnoreIngressClass {
if icConfig.AnnotationValue == *ing.Spec.IngressClassName {
return *ing.Spec.IngressClassName, nil return *ing.Spec.IngressClassName, nil
} else {
return "", errors.Errorf("Cannot validate ing.Spec.IngressClassName: %s due to lack of permission on cluter resource IngressClass", *ing.Spec.IngressClassName)
}
} }
iclass, err := s.listers.IngressClass.ByKey(*ing.Spec.IngressClassName) iclass, err := s.listers.IngressClass.ByKey(*ing.Spec.IngressClassName)
if err != nil { if err != nil {