use a CEL validation for URLs

Author: v47

config/crd/bases/controlplane.cluster.x-k8s.io_awsmanagedcontrolplanes.yaml

@@ -906,9 +906,9 @@ spec:
                       not. Typically the URL consists of only a hostname, like https://server.example.org
                       or https://example.com. This URL should point to the level below .well-known/openid-configuration
                       and must be publicly accessible over the internet.
-                    minLength: 1
-                    pattern: ^https://.+
                     type: string
+                    x-kubernetes-validations:
+                    - rule: isURL(self) && url(self).getScheme() == 'https'
                   requiredClaims:
                     additionalProperties:
                       type: string
@@ -3083,8 +3083,9 @@ spec:
                       or https://example.com. This URL should point to the level below .well-known/openid-configuration
                       and must be publicly accessible over the internet.
                     minLength: 1
-                    pattern: ^https://.+
                     type: string
+                    x-kubernetes-validations:
+                    - rule: isURL(self) && url(self).getScheme() == 'https'
                   requiredClaims:
                     additionalProperties:
                       type: string

config/crd/bases/controlplane.cluster.x-k8s.io_awsmanagedcontrolplanetemplates.yaml

@@ -909,8 +909,9 @@ spec:
                               or https://example.com. This URL should point to the level below .well-known/openid-configuration
                               and must be publicly accessible over the internet.
                             minLength: 1
-                            pattern: ^https://.+
                             type: string
+                            x-kubernetes-validations:
+                            - rule: isURL(self) && url(self).getScheme() == 'https'
                           requiredClaims:
                             additionalProperties:
                               type: string

controlplane/eks/api/v1beta1/types.go

@@ -252,8 +252,7 @@ type OIDCIdentityProviderConfig struct {
 	// and must be publicly accessible over the internet.
 	//
 	// +kubebuilder:validation:Required
-	// +kubebuilder:validation:MinLength=1
-	// +kubebuilder:validation:Pattern=`^https://.+`
+	// +kubebuilder:validation:XValidation:rule="isURL(self) && url(self).getScheme() == 'https'"
 	IssuerURL string `json:"issuerUrl,omitempty"`
 
 	// The key value pairs that describe required claims in the identity token.

controlplane/eks/api/v1beta2/types.go

@@ -257,7 +257,7 @@ type OIDCIdentityProviderConfig struct {
 	//
 	// +kubebuilder:validation:Required
 	// +kubebuilder:validation:MinLength=1
-	// +kubebuilder:validation:Pattern=`^https://.+`
+	// +kubebuilder:validation:XValidation:rule="isURL(self) && url(self).getScheme() == 'https'"
 	IssuerURL string `json:"issuerUrl,omitempty"`
 
 	// The key value pairs that describe required claims in the identity token.