forked from openshift/origin
-
Notifications
You must be signed in to change notification settings - Fork 1
/
strategy.go
87 lines (74 loc) · 3.04 KB
/
strategy.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
package imagestreamimport
import (
"k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/util/validation/field"
apirequest "k8s.io/apiserver/pkg/endpoints/request"
kapi "k8s.io/kubernetes/pkg/api"
configapi "github.com/openshift/origin/pkg/cmd/server/api"
serverapi "github.com/openshift/origin/pkg/cmd/server/api"
imageapi "github.com/openshift/origin/pkg/image/apis/image"
"github.com/openshift/origin/pkg/image/apis/image/validation"
)
// strategy implements behavior for ImageStreamImports.
type strategy struct {
runtime.ObjectTyper
allowedRegistries *serverapi.AllowedRegistries
registryFn imageapi.DefaultRegistryFunc
}
func NewStrategy(registries *serverapi.AllowedRegistries, registryFn imageapi.DefaultRegistryFunc) *strategy {
return &strategy{
ObjectTyper: kapi.Scheme,
allowedRegistries: registries,
registryFn: registryFn,
}
}
func (s *strategy) NamespaceScoped() bool {
return true
}
func (s *strategy) GenerateName(string) string {
return ""
}
func (s *strategy) Canonicalize(runtime.Object) {
}
func (s *strategy) ValidateAllowedRegistries(isi *imageapi.ImageStreamImport) field.ErrorList {
errs := field.ErrorList{}
if s.allowedRegistries == nil {
return errs
}
allowedRegistries := *s.allowedRegistries
// FIXME: The registryFn won't return the registry location until the registry service
// is created. This should be switched to use registry DNS instead of lazy-loading.
if localRegistry, ok := s.registryFn(); ok {
allowedRegistries = append([]configapi.RegistryLocation{{DomainName: localRegistry}}, allowedRegistries...)
}
validate := func(path *field.Path, name string, insecure bool) field.ErrorList {
ref, _ := imageapi.ParseDockerImageReference(name)
registryHost, registryPort := ref.RegistryHostPort(insecure)
return validation.ValidateRegistryAllowedForImport(path.Child("from", "name"), ref.Name, registryHost, registryPort, &allowedRegistries)
}
if spec := isi.Spec.Repository; spec != nil && spec.From.Kind == "DockerImage" {
errs = append(errs, validate(field.NewPath("spec").Child("repository"), spec.From.Name, spec.ImportPolicy.Insecure)...)
}
if len(isi.Spec.Images) > 0 {
for i, image := range isi.Spec.Images {
errs = append(errs, validate(field.NewPath("spec").Child("images").Index(i), image.From.Name, image.ImportPolicy.Insecure)...)
}
}
return errs
}
func (s *strategy) PrepareForCreate(ctx apirequest.Context, obj runtime.Object) {
newIST := obj.(*imageapi.ImageStreamImport)
newIST.Status = imageapi.ImageStreamImportStatus{}
}
func (s *strategy) PrepareImageForCreate(obj runtime.Object) {
image := obj.(*imageapi.Image)
// signatures can be added using "images" or "imagesignatures" resources
image.Signatures = nil
// Remove the raw manifest as it's very big and this leads to a large memory consumption in etcd.
image.DockerImageManifest = ""
image.DockerImageConfig = ""
}
func (s *strategy) Validate(ctx apirequest.Context, obj runtime.Object) field.ErrorList {
isi := obj.(*imageapi.ImageStreamImport)
return validation.ValidateImageStreamImport(isi)
}