mirror of
				https://github.com/k3s-io/kubernetes.git
				synced 2025-10-31 05:40:42 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			117 lines
		
	
	
		
			3.9 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			117 lines
		
	
	
		
			3.9 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| /*
 | |
| Copyright 2017 The Kubernetes Authors.
 | |
| 
 | |
| Licensed under the Apache License, Version 2.0 (the "License");
 | |
| you may not use this file except in compliance with the License.
 | |
| You may obtain a copy of the License at
 | |
| 
 | |
|     http://www.apache.org/licenses/LICENSE-2.0
 | |
| 
 | |
| Unless required by applicable law or agreed to in writing, software
 | |
| distributed under the License is distributed on an "AS IS" BASIS,
 | |
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 | |
| See the License for the specific language governing permissions and
 | |
| limitations under the License.
 | |
| */
 | |
| 
 | |
| package persistentvolume
 | |
| 
 | |
| import (
 | |
| 	utilfeature "k8s.io/apiserver/pkg/util/feature"
 | |
| 	api "k8s.io/kubernetes/pkg/apis/core"
 | |
| 	"k8s.io/kubernetes/pkg/features"
 | |
| )
 | |
| 
 | |
| func getClaimRefNamespace(pv *api.PersistentVolume) string {
 | |
| 	if pv.Spec.ClaimRef != nil {
 | |
| 		return pv.Spec.ClaimRef.Namespace
 | |
| 	}
 | |
| 	return ""
 | |
| }
 | |
| 
 | |
| // Visitor is called with each object's namespace and name, and returns true if visiting should continue
 | |
| type Visitor func(namespace, name string) (shouldContinue bool)
 | |
| 
 | |
| // VisitPVSecretNames invokes the visitor function with the name of every secret
 | |
| // referenced by the PV spec. If visitor returns false, visiting is short-circuited.
 | |
| // Returns true if visiting completed, false if visiting was short-circuited.
 | |
| func VisitPVSecretNames(pv *api.PersistentVolume, visitor Visitor) bool {
 | |
| 	source := &pv.Spec.PersistentVolumeSource
 | |
| 	switch {
 | |
| 	case source.AzureFile != nil:
 | |
| 		if source.AzureFile.SecretNamespace != nil && len(*source.AzureFile.SecretNamespace) > 0 {
 | |
| 			if len(source.AzureFile.SecretName) > 0 && !visitor(*source.AzureFile.SecretNamespace, source.AzureFile.SecretName) {
 | |
| 				return false
 | |
| 			}
 | |
| 		} else {
 | |
| 			if len(source.AzureFile.SecretName) > 0 && !visitor(getClaimRefNamespace(pv), source.AzureFile.SecretName) {
 | |
| 				return false
 | |
| 			}
 | |
| 		}
 | |
| 		return true
 | |
| 	case source.CephFS != nil:
 | |
| 		if source.CephFS.SecretRef != nil {
 | |
| 			// previously persisted PV objects use claimRef namespace
 | |
| 			ns := getClaimRefNamespace(pv)
 | |
| 			if len(source.CephFS.SecretRef.Namespace) > 0 {
 | |
| 				// use the secret namespace if namespace is set
 | |
| 				ns = source.CephFS.SecretRef.Namespace
 | |
| 			}
 | |
| 			if !visitor(ns, source.CephFS.SecretRef.Name) {
 | |
| 				return false
 | |
| 			}
 | |
| 		}
 | |
| 	case source.FlexVolume != nil:
 | |
| 		if source.FlexVolume.SecretRef != nil && !visitor(getClaimRefNamespace(pv), source.FlexVolume.SecretRef.Name) {
 | |
| 			return false
 | |
| 		}
 | |
| 	case source.RBD != nil:
 | |
| 		if source.RBD.SecretRef != nil {
 | |
| 			// previously persisted PV objects use claimRef namespace
 | |
| 			ns := getClaimRefNamespace(pv)
 | |
| 			if len(source.RBD.SecretRef.Namespace) > 0 {
 | |
| 				// use the secret namespace if namespace is set
 | |
| 				ns = source.RBD.SecretRef.Namespace
 | |
| 			}
 | |
| 			if !visitor(ns, source.RBD.SecretRef.Name) {
 | |
| 				return false
 | |
| 			}
 | |
| 		}
 | |
| 	case source.ScaleIO != nil:
 | |
| 		if source.ScaleIO.SecretRef != nil {
 | |
| 			ns := getClaimRefNamespace(pv)
 | |
| 			if source.ScaleIO.SecretRef != nil && len(source.ScaleIO.SecretRef.Namespace) > 0 {
 | |
| 				ns = source.ScaleIO.SecretRef.Namespace
 | |
| 			}
 | |
| 			if !visitor(ns, source.ScaleIO.SecretRef.Name) {
 | |
| 				return false
 | |
| 			}
 | |
| 		}
 | |
| 	case source.ISCSI != nil:
 | |
| 		if source.ISCSI.SecretRef != nil {
 | |
| 			// previously persisted PV objects use claimRef namespace
 | |
| 			ns := getClaimRefNamespace(pv)
 | |
| 			if len(source.ISCSI.SecretRef.Namespace) > 0 {
 | |
| 				// use the secret namespace if namespace is set
 | |
| 				ns = source.ISCSI.SecretRef.Namespace
 | |
| 			}
 | |
| 			if !visitor(ns, source.ISCSI.SecretRef.Name) {
 | |
| 				return false
 | |
| 			}
 | |
| 		}
 | |
| 	case source.StorageOS != nil:
 | |
| 		if source.StorageOS.SecretRef != nil && !visitor(source.StorageOS.SecretRef.Namespace, source.StorageOS.SecretRef.Name) {
 | |
| 			return false
 | |
| 		}
 | |
| 	}
 | |
| 	return true
 | |
| }
 | |
| 
 | |
| // DropDisabledAlphaFields removes disabled fields from the pv spec.
 | |
| // This should be called from PrepareForCreate/PrepareForUpdate for all resources containing a pv spec.
 | |
| func DropDisabledAlphaFields(pvSpec *api.PersistentVolumeSpec) {
 | |
| 	if !utilfeature.DefaultFeatureGate.Enabled(features.BlockVolume) {
 | |
| 		pvSpec.VolumeMode = nil
 | |
| 	}
 | |
| }
 |