1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192 |
- /*
- Copyright 2017 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- package networkpolicy
- import (
- "context"
- "reflect"
- "k8s.io/apimachinery/pkg/runtime"
- "k8s.io/apimachinery/pkg/util/validation/field"
- "k8s.io/apiserver/pkg/storage/names"
- "k8s.io/kubernetes/pkg/api/legacyscheme"
- "k8s.io/kubernetes/pkg/apis/networking"
- "k8s.io/kubernetes/pkg/apis/networking/validation"
- )
- // networkPolicyStrategy implements verification logic for NetworkPolicies
- type networkPolicyStrategy struct {
- runtime.ObjectTyper
- names.NameGenerator
- }
- // Strategy is the default logic that applies when creating and updating NetworkPolicy objects.
- var Strategy = networkPolicyStrategy{legacyscheme.Scheme, names.SimpleNameGenerator}
- // NamespaceScoped returns true because all NetworkPolicies need to be within a namespace.
- func (networkPolicyStrategy) NamespaceScoped() bool {
- return true
- }
- // PrepareForCreate clears the status of a NetworkPolicy before creation.
- func (networkPolicyStrategy) PrepareForCreate(ctx context.Context, obj runtime.Object) {
- networkPolicy := obj.(*networking.NetworkPolicy)
- networkPolicy.Generation = 1
- }
- // PrepareForUpdate clears fields that are not allowed to be set by end users on update.
- func (networkPolicyStrategy) PrepareForUpdate(ctx context.Context, obj, old runtime.Object) {
- newNetworkPolicy := obj.(*networking.NetworkPolicy)
- oldNetworkPolicy := old.(*networking.NetworkPolicy)
- // Any changes to the spec increment the generation number, any changes to the
- // status should reflect the generation number of the corresponding object.
- // See metav1.ObjectMeta description for more information on Generation.
- if !reflect.DeepEqual(oldNetworkPolicy.Spec, newNetworkPolicy.Spec) {
- newNetworkPolicy.Generation = oldNetworkPolicy.Generation + 1
- }
- }
- // Validate validates a new NetworkPolicy.
- func (networkPolicyStrategy) Validate(ctx context.Context, obj runtime.Object) field.ErrorList {
- networkPolicy := obj.(*networking.NetworkPolicy)
- allErrs := validation.ValidateNetworkPolicy(networkPolicy)
- allErrs = append(allErrs, validation.ValidateConditionalNetworkPolicy(networkPolicy, nil)...)
- return allErrs
- }
- // Canonicalize normalizes the object after validation.
- func (networkPolicyStrategy) Canonicalize(obj runtime.Object) {}
- // AllowCreateOnUpdate is false for NetworkPolicy; this means POST is needed to create one.
- func (networkPolicyStrategy) AllowCreateOnUpdate() bool {
- return false
- }
- // ValidateUpdate is the default update validation for an end user.
- func (networkPolicyStrategy) ValidateUpdate(ctx context.Context, obj, old runtime.Object) field.ErrorList {
- validationErrorList := validation.ValidateNetworkPolicy(obj.(*networking.NetworkPolicy))
- updateErrorList := validation.ValidateNetworkPolicyUpdate(obj.(*networking.NetworkPolicy), old.(*networking.NetworkPolicy))
- updateErrorList = append(updateErrorList, validation.ValidateConditionalNetworkPolicy(obj.(*networking.NetworkPolicy), old.(*networking.NetworkPolicy))...)
- return append(validationErrorList, updateErrorList...)
- }
- // AllowUnconditionalUpdate is the default update policy for NetworkPolicy objects.
- func (networkPolicyStrategy) AllowUnconditionalUpdate() bool {
- return true
- }
|