validation

README

When creating a new resource Group extend the Validator.go methodModificationIsSupported() and DeletionIsSupported().

We will also have to update the Webhook Validator helm values as well in install/helm/gloo/templates/5-gateway-validation-webhook-configuration.yaml

Documentation

Index

• Constants
• Variables
• func GetDelegateRef(delegate *v1.DelegateAction) *core.ResourceRef
• func MakeNotificationChannel(ctx context.Context, client validation.GlooValidationServiceClient) (<-chan struct{}, error)
• func NewConnectionRefreshingValidationClient(...) (*connectionRefreshingValidationClient, error)
• func NewValidator(cfg ValidatorConfig) *validator
• type ClientConstructor
  • func RetryOnUnavailableClientConstructor(ctx context.Context, serverAddress string) ClientConstructor
• type GlooValidatorFunc
• type ProxyReports
• type Reports
  • func (r *Reports) GetProxies() []*gloov1.Proxy
• type UpstreamReports
• type Validator
• type ValidatorConfig
  • func NewValidatorConfig(translator translator.Translator, glooValidator GlooValidatorFunc, ...) ValidatorConfig

Constants

const GatewayGroup = "gateway.solo.io"

const (
	InvalidSnapshotErrMessage = "validation is disabled due to an invalid resource which has been written to storage. " +
		"Please correct any Rejected resources to re-enable validation."
)

Variables

var (
	NotReadyErr             = errors.Errorf("validation is not yet available. Waiting for first snapshot")
	HasNotReceivedFirstSync = eris.New("proxy validation called before the validation server received its first sync of resources")

	WrappedUnmarshalErr = func(err error) error {
		return errors.Wrapf(err, unmarshalErrMsg)
	}

	GlooValidationResponseLengthError = func(reports []*gloovalidation.GlooValidationReport) error {
		return errors.Errorf("Expected Gloo validation response to contain 1 report, but contained %d",
			len(reports))
	}
)

var GvkSupportedDeleteGatewayResources = map[schema.GroupVersionKind]bool{
	v1.VirtualServiceGVK: true,
	v1.RouteTableGVK:     true,
}

GvkSupportedDeleteGatewayResources the current group of resources that can be validated

var GvkSupportedValidationGatewayResources = map[schema.GroupVersionKind]bool{
	v1.GatewayGVK:        true,
	v1.VirtualServiceGVK: true,
	v1.RouteTableGVK:     true,
}

GvkSupportedValidationGatewayResources the current group of resources that can be validated

Functions

func GetDelegateRef

func GetDelegateRef(delegate *v1.DelegateAction) *core.ResourceRef

func MakeNotificationChannel

func MakeNotificationChannel(ctx context.Context, client validation.GlooValidationServiceClient) (<-chan struct{}, error)

func NewConnectionRefreshingValidationClient

func NewConnectionRefreshingValidationClient(constructValidationClient func() (validation.GlooValidationServiceClient, error)) (*connectionRefreshingValidationClient, error)

func NewValidator

func NewValidator(cfg ValidatorConfig) *validator

Types

type ClientConstructor

type ClientConstructor func() (client validation.GlooValidationServiceClient, e error)

func RetryOnUnavailableClientConstructor

func RetryOnUnavailableClientConstructor(ctx context.Context, serverAddress string) ClientConstructor

the constructor returned here is not threadsafe; call from a lock

type GlooValidatorFunc

type GlooValidatorFunc = func(ctx context.Context, proxy *gloov1.Proxy,
	resource resources.Resource, delete bool,
) ([]*gloovalidation.GlooValidationReport, error)

type ProxyReports

type ProxyReports []*validation.ProxyReport

type Reports

type Reports struct {
	Proxies      []*gloov1.Proxy
	ProxyReports *ProxyReports
}

func (*Reports) GetProxies

func (r *Reports) GetProxies() []*gloov1.Proxy

type UpstreamReports

type UpstreamReports []*validation.ResourceReport

type Validator

type Validator interface {
	gloov1snap.ApiSyncer
	// ValidateList will validate a list of resources
	ValidateList(ctx context.Context, ul *unstructured.UnstructuredList, dryRun bool) (*Reports, *multierror.Error)
	// ValidateModifiedGvk validate the creation or update of a resource.
	ValidateModifiedGvk(ctx context.Context, gvk schema.GroupVersionKind, resource resources.Resource, dryRun bool) (*Reports, error)
	// ValidateDeletedGvk validate the deletion of a resource.
	ValidateDeletedGvk(ctx context.Context, gvk schema.GroupVersionKind, resource resources.Resource, dryRun bool) error
	// ModificationIsSupported returns whether a resource is supported
	ModificationIsSupported(gvk schema.GroupVersionKind) bool
	// DeletionIsSupported returns whether a deletion of a resource is supported
	DeletionIsSupported(gvk schema.GroupVersionKind) bool
}

type ValidatorConfig

type ValidatorConfig struct {
	// contains filtered or unexported fields
}

func NewValidatorConfig

func NewValidatorConfig(
	translator translator.Translator,
	glooValidator GlooValidatorFunc,
	ignoreProxyValidationFailure, allowWarnings bool,
) ValidatorConfig