123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104 |
- /*
- Copyright 2014 The Kubernetes Authors.
- Licensed under the Apache License, Version 2.0 (the "License");
- you may not use this file except in compliance with the License.
- You may obtain a copy of the License at
- http://www.apache.org/licenses/LICENSE-2.0
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
- */
- package validation
- import (
- "bytes"
- "encoding/json"
- "fmt"
- ejson "github.com/exponent-io/jsonpath"
- utilerrors "k8s.io/apimachinery/pkg/util/errors"
- )
- // Schema is an interface that knows how to validate an API object serialized to a byte array.
- type Schema interface {
- ValidateBytes(data []byte) error
- }
- // NullSchema always validates bytes.
- type NullSchema struct{}
- // ValidateBytes never fails for NullSchema.
- func (NullSchema) ValidateBytes(data []byte) error { return nil }
- // NoDoubleKeySchema is a schema that disallows double keys.
- type NoDoubleKeySchema struct{}
- // ValidateBytes validates bytes.
- func (NoDoubleKeySchema) ValidateBytes(data []byte) error {
- var list []error
- if err := validateNoDuplicateKeys(data, "metadata", "labels"); err != nil {
- list = append(list, err)
- }
- if err := validateNoDuplicateKeys(data, "metadata", "annotations"); err != nil {
- list = append(list, err)
- }
- return utilerrors.NewAggregate(list)
- }
- func validateNoDuplicateKeys(data []byte, path ...string) error {
- r := ejson.NewDecoder(bytes.NewReader(data))
- // This is Go being unfriendly. The 'path ...string' comes in as a
- // []string, and SeekTo takes ...interface{}, so we can't just pass
- // the path straight in, we have to copy it. *sigh*
- ifacePath := []interface{}{}
- for ix := range path {
- ifacePath = append(ifacePath, path[ix])
- }
- found, err := r.SeekTo(ifacePath...)
- if err != nil {
- return err
- }
- if !found {
- return nil
- }
- seen := map[string]bool{}
- for {
- tok, err := r.Token()
- if err != nil {
- return err
- }
- switch t := tok.(type) {
- case json.Delim:
- if t.String() == "}" {
- return nil
- }
- case ejson.KeyString:
- if seen[string(t)] {
- return fmt.Errorf("duplicate key: %s", string(t))
- }
- seen[string(t)] = true
- }
- }
- }
- // ConjunctiveSchema encapsulates a schema list.
- type ConjunctiveSchema []Schema
- // ValidateBytes validates bytes per a ConjunctiveSchema.
- func (c ConjunctiveSchema) ValidateBytes(data []byte) error {
- var list []error
- schemas := []Schema(c)
- for ix := range schemas {
- if err := schemas[ix].ValidateBytes(data); err != nil {
- list = append(list, err)
- }
- }
- return utilerrors.NewAggregate(list)
- }
|