manager should not panic and ignore wrong Clusterscoped type setting …

…in HNCConfiguration

api/v1alpha2/hnc_config.go

@@ -60,6 +60,7 @@ const (
 	// Condition reasons for BadConfiguration
 	ReasonMultipleConfigsForType = "MultipleConfigurationsForType"
 	ReasonResourceNotFound       = "ResourceNotFound"
+	ReasonResourceNotNamespaced  = "ResourceNotNamespaced"
 
 	// Condition reason for OutOfSync, e.g. errors when creating a reconciler.
 	ReasonUnknown = "Unknown"

internal/reconcilers/hnc_config.go

@@ -191,7 +191,11 @@ func (r *ConfigReconciler) reconcileConfigTypes(inst *api.HNCConfiguration, allR
 			// If the type is not found, log error and write conditions but don't
 			// early exit since the other types can still be reconciled.
 			r.Log.Error(err, "while trying to reconcile the configuration", "type", gr, "mode", rsc.Mode)
-			r.writeCondition(inst, api.ConditionBadTypeConfiguration, api.ReasonResourceNotFound, err.Error())
+			if strings.Contains(err.Error(), "not found") {
+				r.writeCondition(inst, api.ConditionBadTypeConfiguration, api.ReasonResourceNotFound, err.Error())
+			} else {
+				r.writeCondition(inst, api.ConditionBadTypeConfiguration, api.ReasonResourceNotNamespaced, err.Error())
+			}
 			continue
 		}
 		r.activeGVKMode[gr] = gvkMode{gvk, rsc.Mode}
@@ -599,6 +603,9 @@ func GVKFor(gr schema.GroupResource, allRes []*restmapper.APIGroupResources) (sc
 		for _, version := range group.Versions {
 			for _, resource := range groupedResources.VersionedResources[version.Version] {
 				if resource.Name == gr.Resource {
+					if !resource.Namespaced {
+						return schema.GroupVersionKind{}, fmt.Errorf("Resource %q is not namespaced", gr)
+					}
 					// Please note that we cannot use resource.group or resource.version
 					// here because they are preferred group/version and they are default
 					// to empty to imply this current containing group/version. Therefore,

internal/reconcilers/hnc_config_test.go

@@ -287,6 +287,14 @@ var _ = Describe("HNCConfiguration", func() {
 		Expect(objectInheritedFrom(ctx, "crontabs", barName, "foo-crontab")).Should(Equal(fooName))
 	})
 
+	It("manager should not panic and ignore wrong Clusterscoped type setting in HNCConfiguration", func() {
+		// Add a config for a type that hasn't been defined yet.
+		addToHNCConfig(ctx, api.RBACGroup, "clusterroles", api.Propagate)
+
+		Eventually(getHNCConfigCondition(ctx, api.ConditionBadTypeConfiguration, api.ReasonResourceNotNamespaced)).
+			Should(ContainSubstring("Resource \"clusterroles.rbac.authorization.k8s.io\" is not namespaced"))
+	})
+
 	It("should set NumPropagatedObjects back to 0 after deleting the source object in propagate mode", func() {
 		addToHNCConfig(ctx, "", "limitranges", api.Propagate)
 		setParent(ctx, barName, fooName)