Add CEL validation for target ref group

Author: Kate Osborn

apis/v1alpha1/clientsettingspolicy_types.go

@@ -41,6 +41,7 @@ type ClientSettingsPolicySpec struct {
 	// Support: Gateway, HTTPRoute, GRPCRoute.
 	//
 	// +kubebuilder:validation:XValidation:message="TargetRef Kind must be one of: Gateway, HTTPRoute, or GRPCRoute",rule="(self.kind=='Gateway' || self.kind=='HTTPRoute' || self.kind=='GRPCRoute')"
+	// +kubebuilder:validation:XValidation:message="TargetRef Group must be gateway.networking.k8s.io.",rule="(self.group=='gateway.networking.k8s.io')"
 	//nolint:lll
 	TargetRef gatewayv1alpha2.PolicyTargetReference `json:"targetRef"`
 

config/crd/bases/gateway.nginx.org_clientsettingspolicies.yaml

@@ -153,6 +153,8 @@ spec:
                 - message: 'TargetRef Kind must be one of: Gateway, HTTPRoute, or
                     GRPCRoute'
                   rule: (self.kind=='Gateway' || self.kind=='HTTPRoute' || self.kind=='GRPCRoute')
+                - message: TargetRef Group must be gateway.networking.k8s.io.
+                  rule: (self.group=='gateway.networking.k8s.io')
             required:
             - targetRef
             type: object

deploy/crds.yaml

@@ -152,6 +152,8 @@ spec:
                 - message: 'TargetRef Kind must be one of: Gateway, HTTPRoute, or
                     GRPCRoute'
                   rule: (self.kind=='Gateway' || self.kind=='HTTPRoute' || self.kind=='GRPCRoute')
+                - message: TargetRef Group must be gateway.networking.k8s.io.
+                  rule: (self.group=='gateway.networking.k8s.io')
             required:
             - targetRef
             type: object