-
Notifications
You must be signed in to change notification settings - Fork 272
/
hostosconfig.go
124 lines (100 loc) Β· 2.99 KB
/
hostosconfig.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
package v1alpha1
import (
"fmt"
"net"
"net/url"
"strings"
"github.com/pkg/errors"
"sigs.k8s.io/cluster-api/bootstrap/kubeadm/api/v1beta1"
)
func validateHostOSConfig(config *HostOSConfiguration, osFamily OSFamily) error {
if config == nil {
return nil
}
if err := validateNTPServers(config.NTPConfiguration); err != nil {
return err
}
return validateBotterocketConfig(config.BottlerocketConfiguration, osFamily)
}
func validateNTPServers(config *NTPConfiguration) error {
if config == nil {
return nil
}
if len(config.Servers) == 0 {
return errors.New("NTPConfiguration.Servers can not be empty")
}
var invalidServers []string
for _, ntpServer := range config.Servers {
// ParseRequestURI expects a scheme but ntp servers generally don't have one
// Prepending a scheme here so it doesn't fail because of missing scheme
if u, err := url.ParseRequestURI(addNTPScheme(ntpServer)); err != nil || u.Scheme == "" || u.Host == "" {
invalidServers = append(invalidServers, ntpServer)
}
}
if len(invalidServers) != 0 {
return fmt.Errorf("ntp servers [%s] is not valid", strings.Join(invalidServers[:], ", "))
}
return nil
}
func addNTPScheme(server string) string {
if strings.Contains(server, "://") {
return server
}
return fmt.Sprintf("udp://%s", server)
}
func validateBotterocketConfig(config *BottlerocketConfiguration, osFamily OSFamily) error {
if config == nil {
return nil
}
if osFamily != Bottlerocket {
return fmt.Errorf("BottlerocketConfiguration can only be used with osFamily: \"%s\"", Bottlerocket)
}
if err := validateBottlerocketKubernetesConfig(config.Kubernetes); err != nil {
return err
}
if err := validateBottlerocketKernelConfiguration(config.Kernel); err != nil {
return err
}
return validateBottlerocketBootSettingsConfiguration(config.Boot)
}
func validateBottlerocketKubernetesConfig(config *v1beta1.BottlerocketKubernetesSettings) error {
if config == nil {
return nil
}
for _, val := range config.AllowedUnsafeSysctls {
if val == "" {
return errors.New("BottlerocketConfiguration.Kubernetes.AllowedUnsafeSysctls can not have an empty string (\"\")")
}
}
for _, ip := range config.ClusterDNSIPs {
if net.ParseIP(ip) == nil {
return fmt.Errorf("IP address [%s] in BottlerocketConfiguration.Kubernetes.ClusterDNSIPs is not a valid IP", ip)
}
}
if config.MaxPods < 0 {
return errors.New("BottlerocketConfiguration.Kubernetes.MaxPods can not be negative")
}
return nil
}
func validateBottlerocketKernelConfiguration(config *v1beta1.BottlerocketKernelSettings) error {
if config == nil {
return nil
}
for key := range config.SysctlSettings {
if key == "" {
return errors.New("sysctlSettings key cannot be empty")
}
}
return nil
}
func validateBottlerocketBootSettingsConfiguration(config *v1beta1.BottlerocketBootSettings) error {
if config == nil {
return nil
}
for key := range config.BootKernelParameters {
if key == "" {
return fmt.Errorf("bootKernelParameters key cannot be empty")
}
}
return nil
}