feat: oas path validation

traefik · Jan 9, 2025 · aafd8b8 · aafd8b8
1 parent 9a0159d
commit aafd8b8
Show file tree

Hide file tree

Showing 94 changed files with 116 additions and 94 deletions.
diff --git a/pkg/apis/hub/v1alpha1/access_control_policy.go b/pkg/apis/hub/v1alpha1/access_control_policy.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/ai_service.go b/pkg/apis/hub/v1alpha1/ai_service.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api.go b/pkg/apis/hub/v1alpha1/api.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published
@@ -86,6 +86,10 @@ type OpenAPISpec struct {
 	// +optional
 	// +kubebuilder:validation:MaxItems=100
 	OperationSets []OperationSet `json:"operationSets,omitempty"`
+
+	// ValidateRequestMethodAndPath validates that the path and method matches an operation defined in the OpenAPI specification.
+	// This option overrides the default behavior configured in the static configuration.
+	ValidateRequestMethodAndPath *bool `json:"validateRequestMethodAndPath,omitempty"`
 }
 
 type Override struct {

diff --git a/pkg/apis/hub/v1alpha1/api_access.go b/pkg/apis/hub/v1alpha1/api_access.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api_bundle.go b/pkg/apis/hub/v1alpha1/api_bundle.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api_catalog_item.go b/pkg/apis/hub/v1alpha1/api_catalog_item.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api_plan.go b/pkg/apis/hub/v1alpha1/api_plan.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api_portal.go b/pkg/apis/hub/v1alpha1/api_portal.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api_rate_limit.go b/pkg/apis/hub/v1alpha1/api_rate_limit.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/api_version.go b/pkg/apis/hub/v1alpha1/api_version.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/crd/embed.go b/pkg/apis/hub/v1alpha1/crd/embed.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/crd/hub.traefik.io_apis.yaml b/pkg/apis/hub/v1alpha1/crd/hub.traefik.io_apis.yaml
@@ -153,6 +153,11 @@ spec:
                     x-kubernetes-validations:
                     - message: must be a valid URL
                       rule: isURL(self)
+                  validateRequestMethodAndPath:
+                    description: |-
+                      ValidateRequestMethodAndPath validates that the path and method matches an operation defined in the OpenAPI specification.
+                      This option overrides the default behavior configured in the static configuration.
+                    type: boolean
                 type: object
                 x-kubernetes-validations:
                 - message: path or url must be defined

diff --git a/pkg/apis/hub/v1alpha1/crd/hub.traefik.io_apiversions.yaml b/pkg/apis/hub/v1alpha1/crd/hub.traefik.io_apiversions.yaml
@@ -157,6 +157,11 @@ spec:
                     x-kubernetes-validations:
                     - message: must be a valid URL
                       rule: isURL(self)
+                  validateRequestMethodAndPath:
+                    description: |-
+                      ValidateRequestMethodAndPath validates that the path and method matches an operation defined in the OpenAPI specification.
+                      This option overrides the default behavior configured in the static configuration.
+                    type: boolean
                 type: object
                 x-kubernetes-validations:
                 - message: path or url must be defined

diff --git a/pkg/apis/hub/v1alpha1/doc.go b/pkg/apis/hub/v1alpha1/doc.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/managed_subscription.go b/pkg/apis/hub/v1alpha1/managed_subscription.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/register.go b/pkg/apis/hub/v1alpha1/register.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/types.go b/pkg/apis/hub/v1alpha1/types.go
@@ -1,5 +1,5 @@
 /*
-Copyright (C) 2022-2024 Traefik Labs
+Copyright (C) 2022-2025 Traefik Labs
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as published

diff --git a/pkg/apis/hub/v1alpha1/zz_generated.deepcopy.go b/pkg/apis/hub/v1alpha1/zz_generated.deepcopy.go
diff --git a/pkg/client/clientset/versioned/clientset.go b/pkg/client/clientset/versioned/clientset.go
diff --git a/pkg/client/clientset/versioned/fake/clientset_generated.go b/pkg/client/clientset/versioned/fake/clientset_generated.go
diff --git a/pkg/client/clientset/versioned/fake/doc.go b/pkg/client/clientset/versioned/fake/doc.go
diff --git a/pkg/client/clientset/versioned/fake/register.go b/pkg/client/clientset/versioned/fake/register.go
diff --git a/pkg/client/clientset/versioned/scheme/doc.go b/pkg/client/clientset/versioned/scheme/doc.go
diff --git a/pkg/client/clientset/versioned/scheme/register.go b/pkg/client/clientset/versioned/scheme/register.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/accesscontrolpolicy.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/accesscontrolpolicy.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/aiservice.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/aiservice.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/api.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/api.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiaccess.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiaccess.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apibundle.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apibundle.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apicatalogitem.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apicatalogitem.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiplan.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiplan.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiportal.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiportal.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiratelimit.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiratelimit.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiversion.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/apiversion.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/doc.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/doc.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/doc.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/doc.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_accesscontrolpolicy.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_accesscontrolpolicy.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_aiservice.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_aiservice.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_api.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_api.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apiaccess.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apiaccess.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apibundle.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apibundle.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apicatalogitem.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apicatalogitem.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apiplan.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apiplan.go
diff --git a/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apiportal.go b/pkg/client/clientset/versioned/typed/hub/v1alpha1/fake/fake_apiportal.go