Files
my-rook-config/pkg/operator/ceph/csi/util.go
T
Nizamudeen 78ef4abeec ceph: Fixing the potential file inclusion error
This commit is also part of gosec error handling which handles the following issue:

Fixed G304: Potential File inclusion by cleaning up the file path

Signed-off-by: Nizamudeen <nia@redhat.com>
2020-02-14 12:22:49 +05:30

187 lines
5.2 KiB
Go

/*
Copyright 2019 The Rook Authors. All rights reserved.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package csi
import (
"bytes"
"io/ioutil"
"os"
"path/filepath"
"strconv"
"strings"
"text/template"
"github.com/ghodss/yaml"
"github.com/pkg/errors"
k8sutil "github.com/rook/rook/pkg/operator/k8sutil"
apps "k8s.io/api/apps/v1"
corev1 "k8s.io/api/core/v1"
"k8s.io/client-go/kubernetes"
)
func loadTemplate(name, templatePath string, p templateParam) (string, error) {
b, err := ioutil.ReadFile(filepath.Clean(templatePath))
if err != nil {
return "", err
}
data := string(b)
var writer bytes.Buffer
t := template.New(name)
t, err = t.Parse(data)
if err != nil {
return "", errors.Wrapf(err, "failed to parse template %v", name)
}
err = t.Execute(&writer, p)
return writer.String(), err
}
func templateToService(name, templatePath string, p templateParam) (*corev1.Service, error) {
var svc corev1.Service
t, err := loadTemplate(name, templatePath, p)
if err != nil {
return nil, errors.Wrapf(err, "failed to load service template")
}
err = yaml.Unmarshal([]byte(t), &svc)
if err != nil {
return nil, errors.Wrapf(err, "failed to unmarshal service template")
}
return &svc, nil
}
func templateToStatefulSet(name, templatePath string, p templateParam) (*apps.StatefulSet, error) {
var ss apps.StatefulSet
t, err := loadTemplate(name, templatePath, p)
if err != nil {
return nil, errors.Wrapf(err, "failed to load statefulset template")
}
err = yaml.Unmarshal([]byte(t), &ss)
if err != nil {
return nil, errors.Wrapf(err, "failed to unmarshal statefulset template")
}
return &ss, nil
}
func templateToDaemonSet(name, templatePath string, p templateParam) (*apps.DaemonSet, error) {
var ds apps.DaemonSet
t, err := loadTemplate(name, templatePath, p)
if err != nil {
return nil, errors.Wrapf(err, "failed to load daemonset template")
}
err = yaml.Unmarshal([]byte(t), &ds)
if err != nil {
return nil, errors.Wrapf(err, "failed to unmarshal daemonset template")
}
return &ds, nil
}
func templateToDeployment(name, templatePath string, p templateParam) (*apps.Deployment, error) {
var ds apps.Deployment
t, err := loadTemplate(name, templatePath, p)
if err != nil {
return nil, errors.Wrapf(err, "failed to load deployment template")
}
err = yaml.Unmarshal([]byte(t), &ds)
if err != nil {
return nil, errors.Wrapf(err, "failed to unmarshal deployment template")
}
return &ds, nil
}
func getToleration(clientset kubernetes.Interface, provisioner bool) []corev1.Toleration {
// Add toleration if any
tolerations := []corev1.Toleration{}
var err error
tolerationsRaw := ""
if provisioner {
tolerationsRaw, err = k8sutil.GetOperatorSetting(clientset, provisionerTolerationsEnv, "")
} else {
tolerationsRaw, err = k8sutil.GetOperatorSetting(clientset, pluginTolerationsEnv, "")
}
if err != nil {
// tolerationsRaw is empty
logger.Warningf("tolerations will not be applied. %v", err)
return tolerations
}
tolerations, err = k8sutil.YamlToTolerations(tolerationsRaw)
if err != nil {
logger.Warningf("failed to parse %q. %v", tolerationsRaw, err)
return tolerations
}
for i := range tolerations {
if tolerations[i].Key == "" {
tolerations[i].Operator = corev1.TolerationOpExists
}
if tolerations[i].Operator == corev1.TolerationOpExists {
tolerations[i].Value = ""
}
}
return tolerations
}
func getNodeAffinity(clientset kubernetes.Interface, provisioner bool) *corev1.NodeAffinity {
// Add NodeAffinity if any
nodeAffinity := ""
v1NodeAffinity := &corev1.NodeAffinity{}
var err error
if provisioner {
nodeAffinity, err = k8sutil.GetOperatorSetting(clientset, provisionerNodeAffinityEnv, "")
} else {
nodeAffinity, err = k8sutil.GetOperatorSetting(clientset, pluginNodeAffinityEnv, "")
}
if err != nil {
logger.Warningf("node affinity will not be applied. %v", err)
// nodeAffinity will be empty by default in case of error
return v1NodeAffinity
}
if nodeAffinity != "" {
v1NodeAffinity, err = k8sutil.GenerateNodeAffinity(nodeAffinity)
if err != nil {
logger.Warningf("failed to parse %q. %v", nodeAffinity, err)
}
}
return v1NodeAffinity
}
func applyToPodSpec(pod *corev1.PodSpec, n *corev1.NodeAffinity, t []corev1.Toleration) {
pod.Tolerations = t
pod.Affinity = &corev1.Affinity{
NodeAffinity: n,
}
}
func getPortFromENV(env string, defaultPort uint16) uint16 {
port := os.Getenv(env)
if strings.TrimSpace(port) == "" {
return defaultPort
}
p, err := strconv.ParseUint(port, 10, 64)
if err != nil {
logger.Debugf("failed to parse port value for env %q. using default port %d. %v", env, defaultPort, err)
return defaultPort
}
if p > 65535 {
logger.Debugf("%s port value is greater than 65535. using default port %d for %s", port, defaultPort, env)
return defaultPort
}
return uint16(p)
}