var printerColumnDatatypes … var customResourceColumnDefinitionFormats … var openapiV3Types … const StaticEstimatedCostLimit … const StaticEstimatedCRDCostLimit … const MaxSelectableFields … var supportedValidationReason … // ValidateCustomResourceDefinition statically validates // context is passed for supporting context cancellation during cel validation when validating defaults func ValidateCustomResourceDefinition(ctx context.Context, obj *apiextensions.CustomResourceDefinition) field.ErrorList { … } type validationOptions … type preexistingExpressions … func (pe preexistingExpressions) RuleEnv(envSet *environment.EnvSet, expression string) *celgo.Env { … } func (pe preexistingExpressions) MessageExpressionEnv(envSet *environment.EnvSet, expression string) *celgo.Env { … } func findPreexistingExpressions(spec *apiextensions.CustomResourceDefinitionSpec) preexistingExpressions { … } func findPreexistingExpressionsInSchema(schema *apiextensions.JSONSchemaProps, expressions preexistingExpressions) { … } // findVersionsWithUnchangedSchemas finds each version that is in the new CRD object and differs from that of the old CRD object. // It returns a set of the names of mutated versions. // This function does not check for duplicated versions, top-level version not in versions, or coexistence of // top-level and per-version schemas, as further validations will check for these problems. func findVersionsWithUnchangedSchemas(obj, oldObject *apiextensions.CustomResourceDefinition) sets.Set[string] { … } // suppressExpressionCostForUnchangedSchema returns a copy of opts with suppressPerExpressionCost set to true if // the specified version's schema is unchanged. func suppressExpressionCostForUnchangedSchema(opts validationOptions, version string) validationOptions { … } // ValidateCustomResourceDefinitionUpdate statically validates // context is passed for supporting context cancellation during cel validation when validating defaults func ValidateCustomResourceDefinitionUpdate(ctx context.Context, obj, oldObj *apiextensions.CustomResourceDefinition) field.ErrorList { … } func validateCustomResourceDefinitionUpdate(ctx context.Context, obj, oldObj *apiextensions.CustomResourceDefinition, opts validationOptions) field.ErrorList { … } // ValidateCustomResourceDefinitionStoredVersions statically validates func ValidateCustomResourceDefinitionStoredVersions(storedVersions []string, versions []apiextensions.CustomResourceDefinitionVersion, fldPath *field.Path) field.ErrorList { … } // ValidateUpdateCustomResourceDefinitionStatus statically validates func ValidateUpdateCustomResourceDefinitionStatus(obj, oldObj *apiextensions.CustomResourceDefinition) field.ErrorList { … } // validateCustomResourceDefinitionVersion statically validates. // context is passed for supporting context cancellation during cel validation when validating defaults func validateCustomResourceDefinitionVersion(ctx context.Context, version *apiextensions.CustomResourceDefinitionVersion, fldPath *field.Path, statusEnabled bool, opts validationOptions) field.ErrorList { … } func validateDeprecationWarning(deprecated bool, deprecationWarning *string) []string { … } // context is passed for supporting context cancellation during cel validation when validating defaults func validateCustomResourceDefinitionSpec(ctx context.Context, spec *apiextensions.CustomResourceDefinitionSpec, opts validationOptions, fldPath *field.Path) field.ErrorList { … } func validateEnumStrings(fldPath *field.Path, value string, accepted []string, required bool) field.ErrorList { … } var acceptedConversionReviewVersions … func isAcceptedConversionReviewVersion(v string) bool { … } func validateConversionReviewVersions(versions []string, requireRecognizedVersion bool, fldPath *field.Path) field.ErrorList { … } // Allows invalid CA Bundle to be specified only if the existing CABundle is invalid // or if the CRD is not established yet. func allowInvalidCABundle(oldCRD *apiextensions.CustomResourceDefinition) bool { … } // hasValidConversionReviewVersion return true if there is a valid version or if the list is empty. func hasValidConversionReviewVersionOrEmpty(versions []string) bool { … } func validateCustomResourceConversion(conversion *apiextensions.CustomResourceConversion, requireRecognizedVersion bool, fldPath *field.Path, opts validationOptions) field.ErrorList { … } // validateCustomResourceDefinitionSpecUpdate statically validates // context is passed for supporting context cancellation during cel validation when validating defaults func validateCustomResourceDefinitionSpecUpdate(ctx context.Context, spec, oldSpec *apiextensions.CustomResourceDefinitionSpec, opts validationOptions, fldPath *field.Path) field.ErrorList { … } // getSubresourcesForVersion returns the subresources for given version in given CRD spec. // NOTE That this function assumes version always exist since it's used by the validation process // that iterates through the existing versions. func getSubresourcesForVersion(crd *apiextensions.CustomResourceDefinitionSpec, version string) *apiextensions.CustomResourceSubresources { … } // hasAnyStatusEnabled returns true if given CRD spec has at least one Status Subresource set // among the top-level and per-version Subresources. func hasAnyStatusEnabled(crd *apiextensions.CustomResourceDefinitionSpec) bool { … } // hasStatusEnabled returns true if given CRD Subresources has non-nil Status set. func hasStatusEnabled(subresources *apiextensions.CustomResourceSubresources) bool { … } // hasPerVersionSchema returns true if a CRD uses per-version schema. func hasPerVersionSchema(versions []apiextensions.CustomResourceDefinitionVersion) bool { … } // hasPerVersionSubresources returns true if a CRD uses per-version subresources. func hasPerVersionSubresources(versions []apiextensions.CustomResourceDefinitionVersion) bool { … } // hasPerVersionColumns returns true if a CRD uses per-version columns. func hasPerVersionColumns(versions []apiextensions.CustomResourceDefinitionVersion) bool { … } // hasIdenticalPerVersionSchema returns true if a CRD sets identical non-nil values // to all per-version schemas func hasIdenticalPerVersionSchema(versions []apiextensions.CustomResourceDefinitionVersion) bool { … } // hasIdenticalPerVersionSubresources returns true if a CRD sets identical non-nil values // to all per-version subresources func hasIdenticalPerVersionSubresources(versions []apiextensions.CustomResourceDefinitionVersion) bool { … } // hasIdenticalPerVersionColumns returns true if a CRD sets identical non-nil values // to all per-version columns func hasIdenticalPerVersionColumns(versions []apiextensions.CustomResourceDefinitionVersion) bool { … } // ValidateCustomResourceDefinitionStatus statically validates func ValidateCustomResourceDefinitionStatus(status *apiextensions.CustomResourceDefinitionStatus, fldPath *field.Path) field.ErrorList { … } // ValidateCustomResourceDefinitionNames statically validates func ValidateCustomResourceDefinitionNames(names *apiextensions.CustomResourceDefinitionNames, fldPath *field.Path) field.ErrorList { … } // ValidateCustomResourceColumnDefinition statically validates a printer column. func ValidateCustomResourceColumnDefinition(col *apiextensions.CustomResourceColumnDefinition, fldPath *field.Path) field.ErrorList { … } func ValidateCustomResourceSelectableFields(selectableFields []apiextensions.SelectableField, schema *structuralschema.Structural, fldPath *field.Path) (allErrs field.ErrorList) { … } func allowedSelectableFieldSchema(schema *structuralschema.Structural) bool { … } type specStandardValidator … // validateCustomResourceDefinitionValidation statically validates // context is passed for supporting context cancellation during cel validation when validating defaults func validateCustomResourceDefinitionValidation(ctx context.Context, customResourceValidation *apiextensions.CustomResourceValidation, statusSubresourceEnabled bool, opts validationOptions, fldPath *field.Path) field.ErrorList { … } var metaFields … type OpenAPISchemaErrorList … // AppendErrors appends all errors in the provided list with the errors of this list. func (o *OpenAPISchemaErrorList) AppendErrors(list *OpenAPISchemaErrorList) { … } // AllErrors returns a list containing both schema and CEL errors. func (o *OpenAPISchemaErrorList) AllErrors() field.ErrorList { … } // ValidateCustomResourceDefinitionOpenAPISchema statically validates func ValidateCustomResourceDefinitionOpenAPISchema(schema *apiextensions.JSONSchemaProps, fldPath *field.Path, ssv specStandardValidator, isRoot bool, opts *validationOptions, celContext *CELSchemaContext) *OpenAPISchemaErrorList { … } func pathValid(schema *apiextensions.JSONSchemaProps, path string) bool { … } // multiplyWithOverflowGuard returns the product of baseCost and cardinality unless that product // would exceed math.MaxUint, in which case math.MaxUint is returned. func multiplyWithOverflowGuard(baseCost, cardinality uint64) uint64 { … } func getExpressionCost(cr cel.CompilationResult, cardinalityCost *CELSchemaContext) uint64 { … } func getCostErrorMessage(costName string, expressionCost, costLimit uint64) string { … } var newlineMatcher … func hasNewlines(s string) bool { … } func validateMapListKeysMapSet(schema *apiextensions.JSONSchemaProps, fldPath *field.Path) field.ErrorList { … } type specStandardValidatorV3 … func (v *specStandardValidatorV3) withForbiddenDefaults(reason string) specStandardValidator { … } func (v *specStandardValidatorV3) withInsideResourceMeta() specStandardValidator { … } func (v *specStandardValidatorV3) insideResourceMeta() bool { … } func (v *specStandardValidatorV3) withForbidOldSelfValidations(path *field.Path) specStandardValidator { … } func (v *specStandardValidatorV3) forbidOldSelfValidations() *field.Path { … } // validate validates against OpenAPI Schema v3. func (v *specStandardValidatorV3) validate(schema *apiextensions.JSONSchemaProps, fldPath *field.Path) field.ErrorList { … } // ValidateCustomResourceDefinitionSubresources statically validates func ValidateCustomResourceDefinitionSubresources(subresources *apiextensions.CustomResourceSubresources, fldPath *field.Path) field.ErrorList { … } func validateSimpleJSONPath(s string, fldPath *field.Path) field.ErrorList { … } var allowedFieldsAtRootSchema … func allowedAtRootSchema(field string) bool { … } // requireOpenAPISchema returns true if the request group version requires a schema func requireOpenAPISchema(oldCRDSpec *apiextensions.CustomResourceDefinitionSpec) bool { … } func allVersionsSpecifyOpenAPISchema(spec *apiextensions.CustomResourceDefinitionSpec) bool { … } func specHasDefaults(spec *apiextensions.CustomResourceDefinitionSpec) bool { … } func schemaHasDefaults(s *apiextensions.JSONSchemaProps) bool { … } func HasSchemaWith(spec *apiextensions.CustomResourceDefinitionSpec, pred func(s *apiextensions.JSONSchemaProps) bool) bool { … } var schemaPool … func schemaHasRecurse(s *apiextensions.JSONSchemaProps, pred func(s *apiextensions.JSONSchemaProps) bool) bool { … } // SchemaHas recursively traverses the Schema and calls the `pred` // predicate to see if the schema contains specific values. // // The predicate MUST NOT keep a copy of the json schema NOR modify the // schema. func SchemaHas(s *apiextensions.JSONSchemaProps, pred func(s *apiextensions.JSONSchemaProps) bool) bool { … } func specHasKubernetesExtensions(spec *apiextensions.CustomResourceDefinitionSpec) bool { … } func schemaHasKubernetesExtensions(s *apiextensions.JSONSchemaProps) bool { … } // requireStructuralSchema returns true if schemas specified must be structural func requireStructuralSchema(oldCRDSpec *apiextensions.CustomResourceDefinitionSpec) bool { … } func specHasNonStructuralSchema(spec *apiextensions.CustomResourceDefinitionSpec) bool { … } func schemaIsNonStructural(schema *apiextensions.JSONSchemaProps) bool { … } // requirePrunedDefaults returns false if there are any unpruned default in oldCRDSpec, and true otherwise. func requirePrunedDefaults(oldCRDSpec *apiextensions.CustomResourceDefinitionSpec) bool { … } func schemaHasUnprunedDefaults(schema *apiextensions.JSONSchemaProps) (bool, error) { … } // requireAtomicSetType returns true if the old CRD spec as at least one x-kubernetes-list-type=set with non-atomic items type. func requireAtomicSetType(oldCRDSpec *apiextensions.CustomResourceDefinitionSpec) bool { … } // hasNonAtomicSetType recurses over the schema and returns whether any list of type "set" as non-atomic item types. func hasNonAtomicSetType(schema *apiextensions.JSONSchemaProps) bool { … } func requireMapListKeysMapSetValidation(oldCRDSpec *apiextensions.CustomResourceDefinitionSpec) bool { … } func hasInvalidMapListKeysMapSet(schema *apiextensions.JSONSchemaProps) bool { … } // requireValidPropertyType returns true if valid openapi v3 types should be required for the given API version func requireValidPropertyType(oldCRDSpec *apiextensions.CustomResourceDefinitionSpec) bool { … } // validateAPIApproval returns a list of errors if the API approval annotation isn't valid func validateAPIApproval(newCRD, oldCRD *apiextensions.CustomResourceDefinition) field.ErrorList { … } func validatePreserveUnknownFields(crd, oldCRD *apiextensions.CustomResourceDefinition) field.ErrorList { … } func specHasInvalidTypes(spec *apiextensions.CustomResourceDefinitionSpec) bool { … } // SchemaHasInvalidTypes returns true if it contains invalid offending openapi-v3 specification. func SchemaHasInvalidTypes(s *apiextensions.JSONSchemaProps) bool { … }
Codebase Browser
kubernetes