mirror of
				https://github.com/optim-enterprises-bv/kubernetes.git
				synced 2025-11-04 04:08:16 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			125 lines
		
	
	
		
			4.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			125 lines
		
	
	
		
			4.1 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
/*
 | 
						|
Copyright 2017 The Kubernetes Authors.
 | 
						|
 | 
						|
Licensed under the Apache License, Version 2.0 (the "License");
 | 
						|
you may not use this file except in compliance with the License.
 | 
						|
You may obtain a copy of the License at
 | 
						|
 | 
						|
    http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
 | 
						|
Unless required by applicable law or agreed to in writing, software
 | 
						|
distributed under the License is distributed on an "AS IS" BASIS,
 | 
						|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | 
						|
See the License for the specific language governing permissions and
 | 
						|
limitations under the License.
 | 
						|
*/
 | 
						|
 | 
						|
package persistentvolume
 | 
						|
 | 
						|
import (
 | 
						|
	utilfeature "k8s.io/apiserver/pkg/util/feature"
 | 
						|
	api "k8s.io/kubernetes/pkg/apis/core"
 | 
						|
	"k8s.io/kubernetes/pkg/features"
 | 
						|
)
 | 
						|
 | 
						|
func getClaimRefNamespace(pv *api.PersistentVolume) string {
 | 
						|
	if pv.Spec.ClaimRef != nil {
 | 
						|
		return pv.Spec.ClaimRef.Namespace
 | 
						|
	}
 | 
						|
	return ""
 | 
						|
}
 | 
						|
 | 
						|
// Visitor is called with each object's namespace and name, and returns true if visiting should continue
 | 
						|
type Visitor func(namespace, name string) (shouldContinue bool)
 | 
						|
 | 
						|
// VisitPVSecretNames invokes the visitor function with the name of every secret
 | 
						|
// referenced by the PV spec. If visitor returns false, visiting is short-circuited.
 | 
						|
// Returns true if visiting completed, false if visiting was short-circuited.
 | 
						|
func VisitPVSecretNames(pv *api.PersistentVolume, visitor Visitor) bool {
 | 
						|
	source := &pv.Spec.PersistentVolumeSource
 | 
						|
	switch {
 | 
						|
	case source.AzureFile != nil:
 | 
						|
		if source.AzureFile.SecretNamespace != nil && len(*source.AzureFile.SecretNamespace) > 0 {
 | 
						|
			if len(source.AzureFile.SecretName) > 0 && !visitor(*source.AzureFile.SecretNamespace, source.AzureFile.SecretName) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		} else {
 | 
						|
			if len(source.AzureFile.SecretName) > 0 && !visitor(getClaimRefNamespace(pv), source.AzureFile.SecretName) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		}
 | 
						|
		return true
 | 
						|
	case source.CephFS != nil:
 | 
						|
		if source.CephFS.SecretRef != nil {
 | 
						|
			// previously persisted PV objects use claimRef namespace
 | 
						|
			ns := getClaimRefNamespace(pv)
 | 
						|
			if len(source.CephFS.SecretRef.Namespace) > 0 {
 | 
						|
				// use the secret namespace if namespace is set
 | 
						|
				ns = source.CephFS.SecretRef.Namespace
 | 
						|
			}
 | 
						|
			if !visitor(ns, source.CephFS.SecretRef.Name) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		}
 | 
						|
	case source.FlexVolume != nil:
 | 
						|
		if source.FlexVolume.SecretRef != nil {
 | 
						|
			// previously persisted PV objects use claimRef namespace
 | 
						|
			ns := getClaimRefNamespace(pv)
 | 
						|
			if len(source.FlexVolume.SecretRef.Namespace) > 0 {
 | 
						|
				// use the secret namespace if namespace is set
 | 
						|
				ns = source.FlexVolume.SecretRef.Namespace
 | 
						|
			}
 | 
						|
			if !visitor(ns, source.FlexVolume.SecretRef.Name) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		}
 | 
						|
	case source.RBD != nil:
 | 
						|
		if source.RBD.SecretRef != nil {
 | 
						|
			// previously persisted PV objects use claimRef namespace
 | 
						|
			ns := getClaimRefNamespace(pv)
 | 
						|
			if len(source.RBD.SecretRef.Namespace) > 0 {
 | 
						|
				// use the secret namespace if namespace is set
 | 
						|
				ns = source.RBD.SecretRef.Namespace
 | 
						|
			}
 | 
						|
			if !visitor(ns, source.RBD.SecretRef.Name) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		}
 | 
						|
	case source.ScaleIO != nil:
 | 
						|
		if source.ScaleIO.SecretRef != nil {
 | 
						|
			ns := getClaimRefNamespace(pv)
 | 
						|
			if source.ScaleIO.SecretRef != nil && len(source.ScaleIO.SecretRef.Namespace) > 0 {
 | 
						|
				ns = source.ScaleIO.SecretRef.Namespace
 | 
						|
			}
 | 
						|
			if !visitor(ns, source.ScaleIO.SecretRef.Name) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		}
 | 
						|
	case source.ISCSI != nil:
 | 
						|
		if source.ISCSI.SecretRef != nil {
 | 
						|
			// previously persisted PV objects use claimRef namespace
 | 
						|
			ns := getClaimRefNamespace(pv)
 | 
						|
			if len(source.ISCSI.SecretRef.Namespace) > 0 {
 | 
						|
				// use the secret namespace if namespace is set
 | 
						|
				ns = source.ISCSI.SecretRef.Namespace
 | 
						|
			}
 | 
						|
			if !visitor(ns, source.ISCSI.SecretRef.Name) {
 | 
						|
				return false
 | 
						|
			}
 | 
						|
		}
 | 
						|
	case source.StorageOS != nil:
 | 
						|
		if source.StorageOS.SecretRef != nil && !visitor(source.StorageOS.SecretRef.Namespace, source.StorageOS.SecretRef.Name) {
 | 
						|
			return false
 | 
						|
		}
 | 
						|
	}
 | 
						|
	return true
 | 
						|
}
 | 
						|
 | 
						|
// DropDisabledAlphaFields removes disabled fields from the pv spec.
 | 
						|
// This should be called from PrepareForCreate/PrepareForUpdate for all resources containing a pv spec.
 | 
						|
func DropDisabledAlphaFields(pvSpec *api.PersistentVolumeSpec) {
 | 
						|
	if !utilfeature.DefaultFeatureGate.Enabled(features.BlockVolume) {
 | 
						|
		pvSpec.VolumeMode = nil
 | 
						|
	}
 | 
						|
}
 |