feat: implement performance optimizations (#2045)

* feat: implement performance optimizations

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

Author: oliverbaehler

api/v1beta2/capsuleconfiguration_status.go

@@ -21,7 +21,7 @@ type CapsuleConfigurationStatus struct {
 	// The total count is available via len(Tenants).
 	// +listType=atomic
 	// +optional
-	Tenants []string `json:"tenants,omitempty"`
+	Tenants []string `json:"tenants"`
 	// ObservedGeneration is the most recent generation the controller has observed.
 	// +optional
 	ObservedGeneration int64 `json:"observedGeneration,omitempty"`

api/v1beta2/capsuleconfiguration_status_test.go

@@ -0,0 +1,31 @@
+// Copyright 2020-2026 Project Capsule Authors
+// SPDX-License-Identifier: Apache-2.0
+
+package v1beta2
+
+import (
+	"encoding/json"
+	"testing"
+)
+
+func TestCapsuleConfigurationStatusSerializesEmptyTenants(t *testing.T) {
+	t.Parallel()
+
+	status := CapsuleConfigurationStatus{Tenants: make([]string, 0)}
+
+	data, err := json.Marshal(status)
+	if err != nil {
+		t.Fatalf("marshal status: %v", err)
+	}
+	if got, want := string(data), `{"tenants":[]}`; got != want {
+		t.Fatalf("marshaled status = %s, want %s", got, want)
+	}
+
+	var decoded CapsuleConfigurationStatus
+	if err := json.Unmarshal(data, &decoded); err != nil {
+		t.Fatalf("unmarshal status: %v", err)
+	}
+	if decoded.Tenants == nil {
+		t.Fatal("tenants must remain initialized after a JSON round trip")
+	}
+}

api/v1beta2/tenantresource_namespaced.go

@@ -26,6 +26,7 @@ type TenantResourceStatus struct {
 
 // +kubebuilder:object:root=true
 // +kubebuilder:subresource:status
+// +kubebuilder:resource:scope=Namespaced,shortName=tr
 // +kubebuilder:printcolumn:name="Items",type="integer",JSONPath=".status.size",description="The total amount of items being replicated"
 // +kubebuilder:printcolumn:name="Ready",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].status",description="Reconcile Status for the tenant"
 // +kubebuilder:printcolumn:name="Status",type="string",JSONPath=".status.conditions[?(@.type==\"Ready\")].message",description="Reconcile Message for the tenant"

charts/capsule/README.md

@@ -307,7 +307,7 @@ The following Values have changed key or Value:
 | webhooks.hooks.ingresses.opts | object | `{}` | Capsule Hook Options |
 | webhooks.hooks.ingresses.reinvocationPolicy | string | `"Never"` | [ReinvocationPolicy](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#reinvocation-policy) |
 | webhooks.hooks.managed.enabled | bool | `true` | Enable the Hook |
-| webhooks.hooks.managed.failurePolicy | string | `"Ignore"` | [FailurePolicy](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#failure-policy) |
+| webhooks.hooks.managed.failurePolicy | string | `"Fail"` | [FailurePolicy](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#failure-policy) |
 | webhooks.hooks.managed.matchConditions | list | `[]` | [MatchConditions](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-matchpolicy) |
 | webhooks.hooks.managed.matchPolicy | string | `"Equivalent"` | [MatchPolicy](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-matchpolicy) |
 | webhooks.hooks.managed.namespaceSelector | object | `{}` | [NamespaceSelector](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#matching-requests-namespaceselector) |

charts/capsule/crds/capsule.clastix.io_tenantresources.yaml

@@ -11,6 +11,8 @@ spec:
     kind: TenantResource
     listKind: TenantResourceList
     plural: tenantresources
+    shortNames:
+    - tr
     singular: tenantresource
   scope: Namespaced
   versions: