Allow to ignore only specific integrations (#35)

Author: borchero

README.md

@@ -163,10 +163,14 @@ also disable processing for individual ingress routes by setting an additional a
 
 ```yaml
 metadata:
-  annoations:
-    switchboard.borchero.com/ignore: "true"
+  annotations:
+    switchboard.borchero.com/ignore: "all"
 ```
 
+By setting the `ignore` annotation to `all` (or `true`), Switchboard does not process the ingress
+route at all. For more fine-grained control, the value of this annotation can also be set to a
+comma-separated list of integrations (possible values `cert-manager`, `external-dns`).
+
 ## License
 
 Switchboard is licensed under the [MIT License](./LICENSE).

internal/controllers/ingressroute.go

@@ -80,6 +80,11 @@ func (r *IngressRouteReconciler) Reconcile(
 
 	// Then, we can run the integrations
 	for _, itg := range r.integrations {
+		if !r.selector.MatchesIntegration(ingressRoute.Annotations, itg.Name()) {
+			// If integration is ignored, skip it
+			logger.Debug("ignoring integration", zap.String("integration", itg.Name()))
+			continue
+		}
 		if err := itg.UpdateResource(ctx, &ingressRoute, info); err != nil {
 			logger.Error("failed to upsert resource",
 				zap.String("integration", itg.Name()), zap.Error(err),

internal/switchboard/selector.go

@@ -1,5 +1,7 @@
 package switchboard
 
+import "strings"
+
 const (
 	ingressAnnotationKey = "kubernetes.io/ingress.class"
 	ignoreAnnotationKey  = "switchboard.borchero.com/ignore"
@@ -21,7 +23,7 @@ func NewSelector(ingressClass *string) Selector {
 func (s Selector) Matches(annotations map[string]string) bool {
 	// If the ignore annotation is set, selector never matches
 	if ignore, ok := annotations[ignoreAnnotationKey]; ok {
-		if ignore == "true" {
+		if ignore == "true" || ignore == "all" {
 			return false
 		}
 	}
@@ -38,3 +40,20 @@ func (s Selector) Matches(annotations map[string]string) bool {
 	// Otherwise, any ingress class is fine
 	return true
 }
+
+// MatchesIntegration returns whether the provided set of annotations match the provided
+// integration.
+func (s Selector) MatchesIntegration(annotations map[string]string, integration string) bool {
+	if ignore, ok := annotations[ignoreAnnotationKey]; ok {
+		if ignore == "true" || ignore == "all" {
+			return false
+		}
+		// Iterate over list of values set for `ignore` annotation
+		for _, ignored := range strings.Split(ignore, ",") {
+			if strings.TrimSpace(ignored) == integration {
+				return false
+			}
+		}
+	}
+	return true
+}

internal/switchboard/selector_test.go

@@ -19,6 +19,13 @@ func TestMatchesNoIngressClass(t *testing.T) {
 		"kubernetes.io/ingress.class":     "test",
 		"switchboard.borchero.com/ignore": "true",
 	}))
+	assert.False(t, selector.Matches(map[string]string{
+		"switchboard.borchero.com/ignore": "all",
+	}))
+	assert.False(t, selector.Matches(map[string]string{
+		"kubernetes.io/ingress.class":     "test",
+		"switchboard.borchero.com/ignore": "all",
+	}))
 }
 
 func TestMatchesIngressClass(t *testing.T) {
@@ -42,4 +49,58 @@ func TestMatchesIngressClass(t *testing.T) {
 		"kubernetes.io/ingress.class":     "ingress",
 		"switchboard.borchero.com/ignore": "true",
 	}))
+	assert.False(t, selector.Matches(map[string]string{
+		"switchboard.borchero.com/ignore": "all",
+	}))
+	assert.False(t, selector.Matches(map[string]string{
+		"kubernetes.io/ingress.class":     "test",
+		"switchboard.borchero.com/ignore": "all",
+	}))
+	assert.False(t, selector.Matches(map[string]string{
+		"kubernetes.io/ingress.class":     "ingress",
+		"switchboard.borchero.com/ignore": "all",
+	}))
+}
+
+func TestMatchesIntegration(t *testing.T) {
+	cls := "ingress"
+	selector := NewSelector(&cls)
+
+	// Ignore all
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "true",
+	}, "external-dns"))
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "all",
+	}, "external-dns"))
+
+	// Ignore only one
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns",
+	}, "external-dns"))
+	assert.True(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "cert-manager",
+	}, "external-dns"))
+
+	// Ignore multiple
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns,cert-manager",
+	}, "external-dns"))
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns,cert-manager",
+	}, "cert-manager"))
+	assert.True(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns,cert-manager",
+	}, "unknown"))
+
+	// Ignore with space in between
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns, cert-manager",
+	}, "external-dns"))
+	assert.False(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns, cert-manager",
+	}, "cert-manager"))
+	assert.True(t, selector.MatchesIntegration(map[string]string{
+		"switchboard.borchero.com/ignore": "external-dns, cert-manager",
+	}, "unknown"))
 }