Adding an admission controller

[dwertent]

Overview

Adding an admission controller that prevents users from updating or deleting the following resources:

• PaladinRegistration
• SmartContractDeployment
• TransactionInvoke
• PaladinRegistry

Message

The output to the user when attempting to delete/update a resource will look similar to this:

% kubectl delete reg node1
Error from server (Forbidden): admission webhook "vpaladinregistration.kb.io" denied the request: deletions of PaladinRegistration resources are not allowed as they have already been submitted to the blockchain and cannot be deleted

Enable/Disable

It is possible to disable the webhook installation by setting the flag:

--set webhook.enabled=false

The default is true.