Add in CEL validation for TargetRefs

Author: ciarams87

apis/v1alpha1/proxysettingspolicy_types.go

@@ -48,6 +48,10 @@ type ProxySettingsPolicySpec struct {
 	//
 	// +kubebuilder:validation:MinItems=1
 	// +kubebuilder:validation:MaxItems=16
+	// +kubebuilder:validation:XValidation:message="TargetRefs entries must have kind Gateway, HTTPRoute, or GRPCRoute",rule="self.all(t, t.kind == 'Gateway' || t.kind == 'HTTPRoute' || t.kind == 'GRPCRoute')"
+	// +kubebuilder:validation:XValidation:message="TargetRefs entries must have group gateway.networking.k8s.io",rule="self.all(t, t.group == 'gateway.networking.k8s.io')"
+	// +kubebuilder:validation:XValidation:message="TargetRefs must be unique",rule="self.all(t1, self.exists_one(t2, t1.group == t2.group && t1.kind == t2.kind && t1.name == t2.name))"
+	//nolint:lll
 	TargetRefs []gatewayv1.LocalPolicyTargetReference `json:"targetRefs"`
 }
 
@@ -93,5 +97,6 @@ type ProxyBuffers struct {
 	// Number sets the number of buffers.
 	//
 	// +kubebuilder:validation:Minimum=2
+	// +kubebuilder:validation:Maximum=256
 	Number int32 `json:"number"`
 }