Skip to content

feat: per-resource Force override annotation for KustomizationRef/PolicyRef #1910

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
gianlucam76 merged 1 commit into from
Aug 9, 2026
Merged

feat: per-resource Force override annotation for KustomizationRef/PolicyRef #1910

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions api/v1beta1/spec.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -671,6 +671,9 @@ type KustomizationRef struct {
// KustomizationRef when an update is rejected with an error that only a delete+recreate
// can resolve (eg an invalid combination of fields, or a field enforced as immutable).
// By default, such errors are surfaced instead of recreating the resource.
// This applies to every resource produced by this KustomizationRef. To force just one
// resource, regardless of this field's value, annotate that resource with
// projectsveltos.io/forceRecreate instead.
// +kubebuilder:default:=false
// +optional
Force bool `json:"force,omitempty"`
Expand Down Expand Up @@ -838,6 +841,9 @@ type PolicyRef struct {
// PolicyRef when an update is rejected with an error that only a delete+recreate can
// resolve (eg an invalid combination of fields, or a field enforced as immutable).
// By default, such errors are surfaced instead of recreating the resource.
// This applies to every resource produced by this PolicyRef. To force just one
// resource, regardless of this field's value, annotate that resource with
// projectsveltos.io/forceRecreate instead.
// +kubebuilder:default:=false
// +optional
Force bool `json:"force,omitempty"`
Expand Down
14 changes: 10 additions & 4 deletions config/crd/bases/config.projectsveltos.io_clusterprofiles.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -774,6 +774,9 @@ spec:
KustomizationRef when an update is rejected with an error that only a delete+recreate
can resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this KustomizationRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1128,6 +1131,9 @@ spec:
PolicyRef when an update is rejected with an error that only a delete+recreate can
resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this PolicyRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1342,7 +1348,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1555,7 +1561,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1768,7 +1774,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2137,7 +2143,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down
24 changes: 18 additions & 6 deletions config/crd/bases/config.projectsveltos.io_clusterpromotions.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -676,6 +676,9 @@ spec:
KustomizationRef when an update is rejected with an error that only a delete+recreate
can resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this KustomizationRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1030,6 +1033,9 @@ spec:
PolicyRef when an update is rejected with an error that only a delete+recreate can
resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this PolicyRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1245,7 +1251,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1459,7 +1465,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1673,7 +1679,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2035,7 +2041,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2320,7 +2326,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2472,6 +2478,9 @@ spec:
PolicyRef when an update is rejected with an error that only a delete+recreate can
resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this PolicyRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -2735,7 +2744,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2887,6 +2896,9 @@ spec:
PolicyRef when an update is rejected with an error that only a delete+recreate can
resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this PolicyRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down
14 changes: 10 additions & 4 deletions config/crd/bases/config.projectsveltos.io_clustersummaries.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -813,6 +813,9 @@ spec:
KustomizationRef when an update is rejected with an error that only a delete+recreate
can resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this KustomizationRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1167,6 +1170,9 @@ spec:
PolicyRef when an update is rejected with an error that only a delete+recreate can
resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this PolicyRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1382,7 +1388,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1596,7 +1602,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1810,7 +1816,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2180,7 +2186,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down
14 changes: 10 additions & 4 deletions config/crd/bases/config.projectsveltos.io_profiles.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -774,6 +774,9 @@ spec:
KustomizationRef when an update is rejected with an error that only a delete+recreate
can resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this KustomizationRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1128,6 +1131,9 @@ spec:
PolicyRef when an update is rejected with an error that only a delete+recreate can
resolve (eg an invalid combination of fields, or a field enforced as immutable).
By default, such errors are surfaced instead of recreating the resource.
This applies to every resource produced by this PolicyRef. To force just one
resource, regardless of this field's value, annotate that resource with
projectsveltos.io/forceRecreate instead.
type: boolean
kind:
description: |-
Expand Down Expand Up @@ -1342,7 +1348,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1555,7 +1561,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -1768,7 +1774,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down Expand Up @@ -2137,7 +2143,7 @@ spec:
timeout:
description: |-
Timeout is how long to wait for the Job to reach Complete or Failed
before treating the check as failed.
before treating the check as failed. Defaults to 5 minutes when unset.
type: string
required:
- jobRef
Expand Down
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ require (
github.com/onsi/gomega v1.42.1
github.com/opencontainers/image-spec v1.1.1
github.com/pkg/errors v0.9.1
github.com/projectsveltos/libsveltos v1.13.1-0.20260804055751-6f6de6aa73cb
github.com/projectsveltos/libsveltos v1.13.1-0.20260809130251-9eb9fb1df8b6
github.com/prometheus/client_golang v1.24.1
github.com/sigstore/cosign/v3 v3.1.2
github.com/sigstore/sigstore v1.10.8
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -642,8 +642,8 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRI
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/poy/onpar v1.1.2 h1:QaNrNiZx0+Nar5dLgTVp5mXkyoVFIbepjyEoGSnhbAY=
github.com/poy/onpar v1.1.2/go.mod h1:6X8FLNoxyr9kkmnlqpK6LSoiOtrO6MICtWwEuWkLjzg=
github.com/projectsveltos/libsveltos v1.13.1-0.20260804055751-6f6de6aa73cb h1:nhZnxIOEzx3kJnuMGPNmSBl/TH4NtMLAy24XfgDCzdE=
github.com/projectsveltos/libsveltos v1.13.1-0.20260804055751-6f6de6aa73cb/go.mod h1:TWOi1aZgpKGGI8lGdXhNE9Rnf3akS5bEVUuDV0EfmSo=
github.com/projectsveltos/libsveltos v1.13.1-0.20260809130251-9eb9fb1df8b6 h1:iM/I1/CrWCrkw10WksihcBHlPI99O2Ca1JtmHF59Qvk=
github.com/projectsveltos/libsveltos v1.13.1-0.20260809130251-9eb9fb1df8b6/go.mod h1:TWOi1aZgpKGGI8lGdXhNE9Rnf3akS5bEVUuDV0EfmSo=
github.com/projectsveltos/lua-utils/glua-json v0.0.0-20251212200258-2b3cdcb7c0f5 h1:khnc+994UszxZYu69J+R5FKiLA/Nk1JQj0EYAkwTWz0=
github.com/projectsveltos/lua-utils/glua-json v0.0.0-20251212200258-2b3cdcb7c0f5/go.mod h1:yVL8KQFa9tmcxgwl9nwIMtKgtmIVC1zaFRSCfOwYvPY=
github.com/projectsveltos/lua-utils/glua-runes v0.0.0-20251212200258-2b3cdcb7c0f5 h1:YbsebwRwTRhV8QacvEAdFqxcxHdeu7JTVtsBovbkgos=
Expand Down
Loading