forked from goharbor/harbor-operator
-
Notifications
You must be signed in to change notification settings - Fork 0
/
harbor_webhook.go
109 lines (84 loc) · 3.34 KB
/
harbor_webhook.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
package v1beta1
import (
"context"
"net/url"
"github.com/pkg/errors"
"github.com/plotly/harbor-operator/pkg/version"
apierrors "k8s.io/apimachinery/pkg/api/errors"
runtime "k8s.io/apimachinery/pkg/runtime"
"k8s.io/apimachinery/pkg/runtime/schema"
"k8s.io/apimachinery/pkg/util/validation/field"
ctrl "sigs.k8s.io/controller-runtime"
logf "sigs.k8s.io/controller-runtime/pkg/log"
"sigs.k8s.io/controller-runtime/pkg/webhook"
)
// log is for logging in this package.
var harborlog = logf.Log.WithName("harbor-resource")
func (h *Harbor) SetupWebhookWithManager(_ context.Context, mgr ctrl.Manager) error {
return ctrl.NewWebhookManagedBy(mgr).
For(h).
Complete()
}
// +kubebuilder:webhook:verbs=create;update,path=/validate-goharbor-io-v1beta1-harbor,mutating=false,failurePolicy=fail,groups=goharbor.io,resources=harbors,versions=v1beta1,name=vharbor.kb.io,admissionReviewVersions={"v1beta1","v1"},sideEffects=None
var _ webhook.Validator = &Harbor{}
// ValidateCreate implements webhook.Validator so a webhook will be registered for the type.
func (h *Harbor) ValidateCreate() error {
harborlog.Info("validate create", "name", h.Name)
return h.Validate(nil)
}
// ValidateUpdate implements webhook.Validator so a webhook will be registered for the type.
func (h *Harbor) ValidateUpdate(old runtime.Object) error {
harborlog.Info("validate update", "name", h.Name)
obj, ok := old.(*Harbor)
if !ok {
return errors.Errorf("failed type assertion on kind: %s", old.GetObjectKind().GroupVersionKind().String())
}
return h.Validate(obj)
}
// ValidateDelete implements webhook.Validator so a webhook will be registered for the type.
func (h *Harbor) ValidateDelete() error {
harborlog.Info("validate delete", "name", h.Name)
return nil
}
func (h *Harbor) Validate(old *Harbor) error {
var allErrs field.ErrorList
if err := h.Spec.Network.Validate(nil); err != nil {
allErrs = append(allErrs, err)
}
if err := h.Spec.Trace.Validate(nil); err != nil {
allErrs = append(allErrs, err)
}
err := h.Spec.ImageChartStorage.Validate()
if err != nil {
allErrs = append(allErrs, field.Invalid(field.NewPath("spec").Child("imageChartStorage"), h.Spec.ImageChartStorage, err.Error()))
}
_, err = url.Parse(h.Spec.ExternalURL)
if err != nil {
allErrs = append(allErrs, field.Invalid(field.NewPath("spec").Child("externalURL"), h.Spec.ExternalURL, err.Error()))
}
if h.Spec.Database == nil {
allErrs = append(allErrs, required(field.NewPath("spec").Child("database")))
}
if h.Spec.Redis == nil {
allErrs = append(allErrs, required(field.NewPath("spec").Child("redis")))
}
if err := h.Spec.ValidateNotary(); err != nil {
allErrs = append(allErrs, err)
}
if err := h.Spec.ValidateRegistryController(); err != nil {
allErrs = append(allErrs, err)
}
if old == nil { // create harbor resource
if err := version.Validate(h.Spec.Version); err != nil {
allErrs = append(allErrs, field.Invalid(field.NewPath("spec").Child("version"), h.Spec.Version, err.Error()))
}
} else { // update harbor resource
if err := version.UpgradeAllowed(old.Spec.Version, h.Spec.Version); err != nil {
allErrs = append(allErrs, field.Invalid(field.NewPath("spec").Child("version"), h.Spec.Version, err.Error()))
}
}
if len(allErrs) == 0 {
return nil
}
return apierrors.NewInvalid(schema.GroupKind{Group: GroupVersion.Group, Kind: "Harbor"}, h.Name, allErrs)
}