fix: add validation constraints to ExternalSecretRewrite to enforce single property selection (#5006)

Signed-off-by: Aakkash-Suresh <i-aakkash.s@devrev.ai>

apis/externalsecrets/v1/externalsecret_types.go

@@ -304,6 +304,8 @@ type ExternalSecretDataFromRemoteRef struct {
 	SourceRef *StoreGeneratorSourceRef `json:"sourceRef,omitempty"`
 }
 
+// +kubebuilder:validation:MinProperties=1
+// +kubebuilder:validation:MaxProperties=1
 type ExternalSecretRewrite struct {
 
 	// Used to merge key/values in one single Secret

apis/externalsecrets/v1beta1/externalsecret_types.go

@@ -304,6 +304,8 @@ type ExternalSecretDataFromRemoteRef struct {
 	SourceRef *StoreGeneratorSourceRef `json:"sourceRef,omitempty"`
 }
 
+// +kubebuilder:validation:MinProperties=1
+// +kubebuilder:validation:MaxProperties=1
 type ExternalSecretRewrite struct {
 	// Used to rewrite with regular expressions.
 	// The resulting key will be the output of a regexp.ReplaceAll operation.

config/crds/bases/external-secrets.io_clusterexternalsecrets.yaml

@@ -301,6 +301,8 @@ spec:
                             Used to rewrite secret Keys after getting them from the secret Provider
                             Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                           items:
+                            maxProperties: 1
+                            minProperties: 1
                             properties:
                               merge:
                                 description: |-
@@ -1089,6 +1091,8 @@ spec:
                             Used to rewrite secret Keys after getting them from the secret Provider
                             Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                           items:
+                            maxProperties: 1
+                            minProperties: 1
                             properties:
                               regexp:
                                 description: |-

config/crds/bases/external-secrets.io_externalsecrets.yaml

@@ -281,6 +281,8 @@ spec:
                         Used to rewrite secret Keys after getting them from the secret Provider
                         Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                       items:
+                        maxProperties: 1
+                        minProperties: 1
                         properties:
                           merge:
                             description: |-
@@ -927,6 +929,8 @@ spec:
                         Used to rewrite secret Keys after getting them from the secret Provider
                         Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                       items:
+                        maxProperties: 1
+                        minProperties: 1
                         properties:
                           regexp:
                             description: |-

deploy/crds/bundle.yaml

@@ -286,6 +286,8 @@ spec:
                               Used to rewrite secret Keys after getting them from the secret Provider
                               Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                             items:
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 merge:
                                   description: |-
@@ -1030,6 +1032,8 @@ spec:
                               Used to rewrite secret Keys after getting them from the secret Provider
                               Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                             items:
+                              maxProperties: 1
+                              minProperties: 1
                               properties:
                                 regexp:
                                   description: |-
@@ -10768,6 +10772,8 @@ spec:
                           Used to rewrite secret Keys after getting them from the secret Provider
                           Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                         items:
+                          maxProperties: 1
+                          minProperties: 1
                           properties:
                             merge:
                               description: |-
@@ -11388,6 +11394,8 @@ spec:
                           Used to rewrite secret Keys after getting them from the secret Provider
                           Multiple Rewrite operations can be provided. They are applied in a layered order (first to last)
                         items:
+                          maxProperties: 1
+                          minProperties: 1
                           properties:
                             regexp:
                               description: |-