filter.go

/*
 * Tencent is pleased to support the open source community by making TKEStack
 * available.
 *
 * Copyright (C) 2012-2019 Tencent. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 * this file except in compliance with the License. You may obtain a copy of the
 * License at
 *
 * https://opensource.org/licenses/Apache-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 * WARRANTIES OF ANY KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations under the License.
 */

package util

import (
	"context"

	"k8s.io/apimachinery/pkg/api/errors"
	"tkestack.io/tke/api/business"
	businessv1 "tkestack.io/tke/api/business/v1"
	"tkestack.io/tke/pkg/apiserver/authentication"
)

// FilterNamespace is used to filter namespaces that do not belong to the tenant.
func FilterNamespace(ctx context.Context, namespace *business.Namespace) error {
	_, tenantID := authentication.UsernameAndTenantID(ctx)
	if tenantID == "" {
		return nil
	}
	if namespace.Spec.TenantID != tenantID {
		return errors.NewNotFound(businessv1.Resource("namespace"), namespace.ObjectMeta.Name)
	}
	return nil
}

// FilterProject is used to filter projects that do not belong to the tenant.
func FilterProject(ctx context.Context, project *business.Project) error {
	_, tenantID := authentication.UsernameAndTenantID(ctx)
	if tenantID == "" {
		return nil
	}
	if project.Spec.TenantID != tenantID {
		return errors.NewNotFound(businessv1.Resource("project"), project.ObjectMeta.Name)
	}
	return nil
}

// FilterPlatform is used to filter platforms that do not belong to the tenant.
func FilterPlatform(ctx context.Context, platform *business.Platform) error {
	_, tenantID := authentication.UsernameAndTenantID(ctx)
	if tenantID == "" {
		return nil
	}
	if platform.Spec.TenantID != tenantID {
		return errors.NewNotFound(businessv1.Resource("platform"), platform.ObjectMeta.Name)
	}
	return nil
}

// FilterImageNamespace is used to filter imageNamespaces that do not belong to the tenant.
func FilterImageNamespace(ctx context.Context, imageNamespace *business.ImageNamespace) error {
	_, tenantID := authentication.UsernameAndTenantID(ctx)
	if tenantID == "" {
		return nil
	}
	if imageNamespace.Spec.TenantID != tenantID {
		return errors.NewNotFound(businessv1.Resource("imagenamespace"), imageNamespace.ObjectMeta.Name)
	}
	return nil
}

// FilterChartGroup is used to filter chartGroups that do not belong to the tenant.
func FilterChartGroup(ctx context.Context, chartGroup *business.ChartGroup) error {
	_, tenantID := authentication.UsernameAndTenantID(ctx)
	if tenantID == "" {
		return nil
	}
	if chartGroup.Spec.TenantID != tenantID {
		return errors.NewNotFound(businessv1.Resource("chartgroup"), chartGroup.ObjectMeta.Name)
	}
	return nil
}

// FilterNsEmigration is used to filter emigrations that do not belong to the tenant.
func FilterNsEmigration(ctx context.Context, emigration *business.NsEmigration) error {
	_, tenantID := authentication.UsernameAndTenantID(ctx)
	if tenantID == "" {
		return nil
	}
	if emigration.Spec.TenantID != tenantID {
		return errors.NewNotFound(businessv1.Resource("nsemigration"), emigration.ObjectMeta.Name)
	}
	return nil
}