fix: prevent removing clusterRef or requestRef from AccessRequest (#34)

Author: Diaphteiros

api/clusters/v1alpha1/accessrequest_types.go

@@ -5,6 +5,8 @@ import (
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
+// +kubebuilder:validation:XValidation:rule="!has(oldSelf.clusterRef) || has(self.clusterRef)", message="clusterRef may not be removed once set"
+// +kubebuilder:validation:XValidation:rule="!has(oldSelf.requestRef) || has(self.requestRef)", message="requestRef may not be removed once set"
 type AccessRequestSpec struct {
 	// ClusterRef is the reference to the Cluster for which access is requested.
 	// If set, requestRef will be ignored.

api/crds/manifests/clusters.openmcp.cloud_accessrequests.yaml

@@ -155,6 +155,11 @@ spec:
             required:
             - permissions
             type: object
+            x-kubernetes-validations:
+            - message: clusterRef may not be removed once set
+              rule: '!has(oldSelf.clusterRef) || has(self.clusterRef)'
+            - message: requestRef may not be removed once set
+              rule: '!has(oldSelf.requestRef) || has(self.requestRef)'
           status:
             description: AccessRequestStatus defines the observed state of AccessRequest
             properties: