Implement webhook validations for the XGBoostJob

Signed-off-by: Yuki Iwai <[email protected]>

Author: tenzen-y

manifests/base/webhook/manifests.yaml

@@ -24,3 +24,23 @@ webhooks:
     resources:
     - pytorchjobs
   sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: webhook-service
+      namespace: system
+      path: /validate-kubeflow-org-v1-xgboostjob
+  failurePolicy: Fail
+  name: validator.xgboostjob.training-operator.kubeflow.org
+  rules:
+  - apiGroups:
+    - kubeflow.org
+    apiVersions:
+    - v1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - xgboostjobs
+  sideEffects: None

manifests/base/webhook/patch.yaml

@@ -1,6 +1,9 @@
 - op: replace
   path: /webhooks/0/clientConfig/service/name
   value: training-operator
+- op: replace
+  path: /webhooks/1/clientConfig/service/name
+  value: training-operator
 - op: replace
   path: /metadata/name
   value: validator.training-operator.kubeflow.org

pkg/apis/kubeflow.org/v1/xgboost_validation.go

@@ -18,9 +18,10 @@ package cert
 
 import (
 	"fmt"
+	"os"
+
 	cert "github.com/open-policy-agent/cert-controller/pkg/rotator"
 	"k8s.io/apimachinery/pkg/types"
-	"os"
 	ctrl "sigs.k8s.io/controller-runtime"
 )