spidermultusconfig: validate customcniconfig if is valid

spidernet-io · Aug 8, 2023 · 4c2866f · 4c2866f
1 parent 92915e0
commit 4c2866f
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/pkg/multuscniconfig/multusconfig_informer.go b/pkg/multuscniconfig/multusconfig_informer.go
@@ -415,8 +415,12 @@ func generateNetAttachDef(netAttachName string, multusConf *spiderpoolv2beta1.Sp
 		}
 	case CustomType:
 		if multusConfSpec.CustomCNIConfig != nil && len(*multusConfSpec.CustomCNIConfig) > 0 {
+			if !json.Valid([]byte(*multusConfSpec.CustomCNIConfig)) {
+				return nil, fmt.Errorf("customCniConfig isn't a valid JSON encoding")
+			}
 			confStr = *multusConfSpec.CustomCNIConfig
 		}
+
 	default:
 		// It's impossible get into the default branch
 		return nil, fmt.Errorf("%w: unrecognized CNI type %s", constant.ErrWrongInput, multusConfSpec.CniType)

diff --git a/pkg/multuscniconfig/multusconfig_validate.go b/pkg/multuscniconfig/multusconfig_validate.go
@@ -4,6 +4,7 @@
 package multuscniconfig
 
 import (
+	"encoding/json"
 	"fmt"
 
 	"k8s.io/apimachinery/pkg/util/validation/field"
@@ -84,6 +85,12 @@ func validateCNIConfig(multusConfig *spiderpoolv2beta1.SpiderMultusConfig) *fiel
 		if multusConfig.Spec.MacvlanConfig != nil || multusConfig.Spec.IPVlanConfig != nil || multusConfig.Spec.SriovConfig != nil {
 			return field.Forbidden(cniTypeField, fmt.Sprintf("the cniType %s only supports %s, please remove other CNI configs", CustomType, customCniConfigField.String()))
 		}
+
+		if multusConfig.Spec.CustomCNIConfig != nil && *multusConfig.Spec.CustomCNIConfig != "" {
+			if !json.Valid([]byte(*multusConfig.Spec.CustomCNIConfig)) {
+				return field.Forbidden(customCniConfigField, fmt.Sprintf("cusstomCniConfig is invalid json format"))
+			}
+		}
 	}
 
 	if multusConfig.Spec.CoordinatorConfig != nil {