forked from openshift/origin
-
Notifications
You must be signed in to change notification settings - Fork 1
/
strategy.go
71 lines (56 loc) · 2.15 KB
/
strategy.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
package identity
import (
"k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/util/validation/field"
apirequest "k8s.io/apiserver/pkg/endpoints/request"
"k8s.io/apiserver/pkg/registry/rest"
kapi "k8s.io/kubernetes/pkg/api"
userapi "github.com/openshift/origin/pkg/user/apis/user"
"github.com/openshift/origin/pkg/user/apis/user/validation"
)
// identityStrategy implements behavior for Identities
type identityStrategy struct {
runtime.ObjectTyper
}
// Strategy is the default logic that applies when creating and updating Identity
// objects via the REST API.
var Strategy = identityStrategy{kapi.Scheme}
func (identityStrategy) DefaultGarbageCollectionPolicy() rest.GarbageCollectionPolicy {
return rest.Unsupported
}
func (identityStrategy) PrepareForUpdate(ctx apirequest.Context, obj, old runtime.Object) {}
// NamespaceScoped is false for users
func (identityStrategy) NamespaceScoped() bool {
return false
}
func (identityStrategy) GenerateName(base string) string {
return base
}
func (identityStrategy) PrepareForCreate(ctx apirequest.Context, obj runtime.Object) {
identity := obj.(*userapi.Identity)
identity.Name = identityName(identity.ProviderName, identity.ProviderUserName)
}
// this name cannot change since it must match resources persisted into etcd.
func identityName(provider, identity string) string {
// TODO: normalize?
return provider + ":" + identity
}
// Validate validates a new user
func (identityStrategy) Validate(ctx apirequest.Context, obj runtime.Object) field.ErrorList {
identity := obj.(*userapi.Identity)
return validation.ValidateIdentity(identity)
}
// AllowCreateOnUpdate is false for identity
func (identityStrategy) AllowCreateOnUpdate() bool {
return false
}
func (identityStrategy) AllowUnconditionalUpdate() bool {
return false
}
// Canonicalize normalizes the object after validation.
func (identityStrategy) Canonicalize(obj runtime.Object) {
}
// ValidateUpdate is the default update validation for an identity
func (identityStrategy) ValidateUpdate(ctx apirequest.Context, obj, old runtime.Object) field.ErrorList {
return validation.ValidateIdentityUpdate(obj.(*userapi.Identity), old.(*userapi.Identity))
}