Function GetWebhooksCacheFunc

pkg/cache/cache.go:110–131

GetWebhooksCacheFunc returns a new cache function that restricts the cluster items we store in the webhook server's internal cache. This avoids issues where the webhook server's memory usage scales with the number of objects on the cluster, potentially causing out of memory errors in large clusters.

(namespace string)

// server's internal cache. This avoids issues where the webhook server's memory usage scales with the number
// of objects on the cluster, potentially causing out of memory errors in large clusters.
func GetWebhooksCacheFunc(namespace string) (cache.NewCacheFunc, error) {
	// The webhooks server needs to read pods to validate pods/exec requests. These pods must have the DevWorkspace ID and restricted
	// access labels (other pods are automatically approved)
	devworkspaceObjectSelector, err := labels.Parse(constants.DevWorkspaceIDLabel)
	if err != nil {
		return nil, err
	}

	selectors := map[client.Object]cache.ByObject{
		&corev1.Pod{}: {
			Label: devworkspaceObjectSelector,
		},
	}

	return func(config *rest.Config, opts cache.Options) (cache.Cache, error) {
		opts.ByObject = selectors
		opts.DefaultNamespaces = map[string]cache.Config{
			namespace: {},
		}
		return cache.New(config, opts)
	}, nil
}