forked from openshift/origin
-
Notifications
You must be signed in to change notification settings - Fork 0
/
strategy.go
68 lines (55 loc) · 1.83 KB
/
strategy.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
package oauthaccesstoken
import (
"fmt"
"github.com/openshift/origin/pkg/oauth/api"
"github.com/openshift/origin/pkg/oauth/api/validation"
kapi "k8s.io/kubernetes/pkg/api"
"k8s.io/kubernetes/pkg/fields"
"k8s.io/kubernetes/pkg/labels"
"k8s.io/kubernetes/pkg/registry/generic"
"k8s.io/kubernetes/pkg/runtime"
"k8s.io/kubernetes/pkg/util/validation/field"
)
// strategy implements behavior for OAuthAccessTokens
type strategy struct {
runtime.ObjectTyper
}
// Strategy is the default logic that applies when creating OAuthAccessToken
// objects via the REST API.
var Strategy = strategy{kapi.Scheme}
func (strategy) PrepareForUpdate(obj, old runtime.Object) {}
// NamespaceScoped is false for OAuth objects
func (strategy) NamespaceScoped() bool {
return false
}
func (strategy) GenerateName(base string) string {
return base
}
func (strategy) PrepareForCreate(obj runtime.Object) {
}
// Validate validates a new token
func (strategy) Validate(ctx kapi.Context, obj runtime.Object) field.ErrorList {
token := obj.(*api.OAuthAccessToken)
return validation.ValidateAccessToken(token)
}
// AllowCreateOnUpdate is false for OAuth objects
func (strategy) AllowCreateOnUpdate() bool {
return false
}
func (strategy) AllowUnconditionalUpdate() bool {
return false
}
// Canonicalize normalizes the object after validation.
func (strategy) Canonicalize(obj runtime.Object) {
}
// Matchtoken returns a generic matcher for a given label and field selector.
func Matcher(label labels.Selector, field fields.Selector) generic.Matcher {
return generic.MatcherFunc(func(obj runtime.Object) (bool, error) {
tokenObj, ok := obj.(*api.OAuthAccessToken)
if !ok {
return false, fmt.Errorf("not a token")
}
fields := api.OAuthAccessTokenToSelectableFields(tokenObj)
return label.Matches(labels.Set(tokenObj.Labels)) && field.Matches(fields), nil
})
}