feat(stackable-webhook)!: Add support for mutating webhooks (#1119)

* feat!: Add support for mutating webhooks

* Add state to the mutating webhook

* Improve docs

* Add some docs

* refactor: Rename traits and structs

* Add some docs

* More docs

* Apply suggestions from code review

Co-authored-by: Nick <[email protected]>

* Update crates/stackable-webhook/src/lib.rs

Co-authored-by: Nick <[email protected]>

* formatiing

* Rename operator to webhook

* Tkae the WebhookServerOptions by reference

* Remove leftover code

* Update crates/stackable-webhook/src/servers/mutating_webhook.rs

Co-authored-by: Nick <[email protected]>

* Move tracing layer to after routes

* Improve tracing

* Rename servers mdodule to webhooks

* Add some docs

* Add some docs

* changelog

* changelog

* Update crates/stackable-webhook/src/lib.rs

Co-authored-by: Nick <[email protected]>

* Update crates/stackable-webhook/src/lib.rs

Co-authored-by: Nick <[email protected]>

* fix doc tests

* Improve shutdown message

* Add validating webhook as well

* refactor: Avoid Box

* refactor: Move out into get_webhook_client_config

* Revert "refactor: Avoid Box"

This reverts commit bea8241.

It actually caused lifetime problems in commons-operator

* Remove unneeded loop

* Move new Self{} into variable

* Only clone the handler

* calculated -> determined

* Clarify only operator touch MWCs

* Add Webhhok::ignore_certificate_rotation trait function

* docs: Add some field level docs

* Remove validating webhook for now

It's too much copy/paste from mutating, we need to refactor at a later
point

* trace::debug route registration

* Add some docs for conversion webhook

* Remove unneeded #[allow(unreachable_code)]

* Address review feedback in offline session

* clippy

* More tracing fields

* Rename to create_webhook_client_config

* docs docs docs

* Move _resource down

* Return early if no webhooks are registered

* Fix kube dependency in Cargo.toml

---------

Co-authored-by: Nick <[email protected]>
Co-authored-by: Techassi <[email protected]>

Author: 3 people

Cargo.lock

@@ -11,7 +11,8 @@ repository = "https://github.com/stackabletech/operator-rs"
 [workspace.dependencies]
 product-config = { git = "https://github.com/stackabletech/product-config.git", tag = "0.8.0" }
 
-arc-swap = "1.7"
+arc-swap = "1.7.0"
+async-trait = "0.1.89"
 axum = { version = "0.8.1", features = ["http2"] }
 chrono = { version = "0.4.38", default-features = false }
 clap = { version = "4.5.17", features = ["derive", "cargo", "env"] }
@@ -38,7 +39,7 @@ k8s-openapi = { version = "0.26.0", default-features = false, features = ["schem
 # We use rustls instead of openssl for easier portability, e.g. so that we can build stackablectl without the need to vendor (build from source) openssl
 # We use ring instead of aws-lc-rs, as this currently fails to build in "make run-dev"
 # We pin the kube version, as we use a patch for 2.0.1
-kube = { git = "https://github.com/stackabletech/kube-rs", branch = "2.0.1-fix-schema-hoisting", version = "=2.0.1", default-features = false, features = ["client", "jsonpatch", "runtime", "derive", "rustls-tls", "ring"] }
+kube = { git = "https://github.com/stackabletech/kube-rs", branch = "2.0.1-fix-schema-hoisting", version = "=2.0.1", default-features = false, features = ["client", "jsonpatch", "runtime", "derive", "admission", "rustls-tls", "ring"] }
 opentelemetry = "0.31.0"
 opentelemetry_sdk = { version = "0.31.0", features = ["rt-tokio"] }
 opentelemetry-appender-tracing = "0.31.0"

Cargo.toml

@@ -4,6 +4,17 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Added
+
+- Add support for mutating webhooks ([#1119]).
+
+### Changed
+
+- BREAKING: Refactor the entire `WebhookServer` mechanism, so multiple webhooks can run in parallel.
+  Put individual webhooks (currently `ConversionWebhook` and `MutatingWebhook`) behind the `Webhook` trait ([#1119]).
+
+[#1119]: https://github.com/stackabletech/operator-rs/pull/1119
+
 ## [0.7.1] - 2025-10-31
 
 ### Fixed

crates/stackable-webhook/CHANGELOG.md

@@ -12,6 +12,7 @@ stackable-shared = { path = "../stackable-shared" }
 stackable-telemetry = { path = "../stackable-telemetry" }
 
 arc-swap.workspace = true
+async-trait.workspace = true
 axum.workspace = true
 futures-util.workspace = true
 hyper-util.workspace = true
@@ -21,6 +22,7 @@ kube.workspace = true
 opentelemetry.workspace = true
 opentelemetry-semantic-conventions.workspace = true
 rand.workspace = true
+serde.workspace = true
 serde_json.workspace = true
 snafu.workspace = true
 tokio-rustls.workspace = true