-
Notifications
You must be signed in to change notification settings - Fork 8
/
utils.go
120 lines (100 loc) · 3.44 KB
/
utils.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
/*
* MIT License
*
* Copyright (c) since 2021, flomesh.io Authors.
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in all
* copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
* SOFTWARE.
*/
package webhook
import (
"fmt"
"net"
"strings"
"k8s.io/apimachinery/pkg/util/validation"
"k8s.io/apimachinery/pkg/util/validation/field"
netutils "k8s.io/utils/net"
gwv1beta1 "sigs.k8s.io/gateway-api/apis/v1beta1"
)
// ValidateParentRefs validates the parent refs of gateway route resource
func ValidateParentRefs(refs []gwv1beta1.ParentReference) field.ErrorList {
var errs field.ErrorList
for i, ref := range refs {
if ref.Port == nil {
path := field.NewPath("spec").Child("parentRefs").Index(i)
errs = append(errs, field.Required(path, "port must be set"))
}
}
return errs
}
// IsValidHostname validates the hostname of gateway route resource
func IsValidHostname(hostname string) error {
if net.ParseIP(hostname) != nil {
return fmt.Errorf("invalid hostname %q: must be a DNS name, not an IP address", hostname)
}
if strings.Contains(hostname, "*") {
if errs := validation.IsWildcardDNS1123Subdomain(hostname); errs != nil {
return fmt.Errorf("invalid hostname %q: %v", hostname, errs)
}
} else {
if errs := validation.IsDNS1123Subdomain(hostname); errs != nil {
return fmt.Errorf("invalid hostname %q: %v", hostname, errs)
}
}
return nil
}
// ValidateRouteHostnames validates the hostnames of gateway route resource
func ValidateRouteHostnames(hostnames []gwv1beta1.Hostname) field.ErrorList {
var errs field.ErrorList
for i, hostname := range hostnames {
h := string(hostname)
if err := IsValidHostname(h); err != nil {
path := field.NewPath("spec").
Child("hostnames").Index(i)
errs = append(errs, field.Invalid(path, h, fmt.Sprintf("%s", err)))
}
}
return errs
}
// IsValidIPOrCIDR tests that the argument is a valid IP address.
func IsValidIPOrCIDR(value string) []string {
if netutils.IsIPv4String(value) {
return nil
}
if netutils.IsIPv6String(value) {
return nil
}
if netutils.IsIPv4CIDRString(value) {
return nil
}
if netutils.IsIPv6CIDRString(value) {
return nil
}
return []string{"must be a valid IP address or CIDR, (e.g. 10.9.8.7 or 2001:db8::ffff or 192.0.2.0/24 or 2001:db8::/32)"}
}
func GetListenerIfHasMatchingPort(port gwv1beta1.PortNumber, listeners []gwv1beta1.Listener) *gwv1beta1.Listener {
if len(listeners) == 0 {
return nil
}
for i, listener := range listeners {
if port == listener.Port {
return &listeners[i]
}
}
return nil
}