diff --git a/internal/resolvers/crds/schema/validate.go b/internal/resolvers/crds/schema/validate.go
index 58aa649..5b17bb9 100644
--- a/internal/resolvers/crds/schema/validate.go
+++ b/internal/resolvers/crds/schema/validate.go
@@ -37,6 +37,40 @@ func buildValidationFromSchemaData(data map[string]any) (*apiextensions.CustomRe
}, nil
}
+// enforceStrictObjects set additionalProperties=false on all nodes (type: object)
+func enforceStrictObjects(node map[string]any) {
+ if nodeType, ok := node["type"].(string); ok && nodeType == "object" {
+ // If preserve-unknown-fields exists, do not force additionalProperties
+ preserve, ok := node["x-kubernetes-preserve-unknown-fields"].(bool)
+ if !(ok && preserve) {
+ if _, exists := node["additionalProperties"]; !exists {
+ node["additionalProperties"] = false
+ }
+ }
+ }
+
+ // Recursion for properties
+ if props, ok := node["properties"].(map[string]any); ok {
+ for _, v := range props {
+ if child, ok := v.(map[string]any); ok {
+ enforceStrictObjects(child)
+ }
+ }
+ }
+
+ // Recursion for items (array)
+ if items, ok := node["items"].(map[string]any); ok {
+ enforceStrictObjects(items)
+ } else if itemsSlice, ok := node["items"].([]any); ok {
+ for _, it := range itemsSlice {
+ if child, ok := it.(map[string]any); ok {
+ enforceStrictObjects(child)
+ }
+ }
+ }
+}
+
+/*
// enforceStrictObjects set additionalProperties=false on all nodes (type: object)
func enforceStrictObjects(node map[string]any) {
if nodeType, ok := node["type"].(string); ok && nodeType == "object" {
@@ -65,6 +99,7 @@ func enforceStrictObjects(node map[string]any) {
}
}
}
+*/
func validateCustomResource(crv *apiextensions.CustomResourceValidation, doc map[string]any) error {
validator, _, err := validation.NewSchemaValidator(crv.OpenAPIV3Schema)
diff --git a/testdata/sselogs/index.html b/testdata/sselogs/index.html
deleted file mode 100644
index 5ec8176..0000000
--- a/testdata/sselogs/index.html
+++ /dev/null
@@ -1,74 +0,0 @@
-
-
-
-
-
- Live Logs via SSE
-
-
-
-
- Live Logs via SSE
-
-
-
-
-
-