mirror of
https://github.com/projectcapsule/capsule.git
synced 2026-05-21 16:52:51 +00:00
65 lines
1.9 KiB
Go
65 lines
1.9 KiB
Go
// Copyright 2020-2023 Project Capsule Authors.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package v1beta1
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/projectcapsule/capsule/pkg/api"
|
|
)
|
|
|
|
type NamespaceOptions struct {
|
|
// +kubebuilder:validation:Minimum=1
|
|
// Specifies the maximum number of namespaces allowed for that Tenant. Once the namespace quota assigned to the Tenant has been reached, the Tenant owner cannot create further namespaces. Optional.
|
|
Quota *int32 `json:"quota,omitempty"`
|
|
// Specifies additional labels and annotations the Capsule operator places on any Namespace resource in the Tenant. Optional.
|
|
AdditionalMetadata *api.AdditionalMetadataSpec `json:"additionalMetadata,omitempty"`
|
|
}
|
|
|
|
func (in *Tenant) hasForbiddenNamespaceLabelsAnnotations() bool {
|
|
if _, ok := in.Annotations[api.ForbiddenNamespaceLabelsAnnotation]; ok {
|
|
return true
|
|
}
|
|
|
|
if _, ok := in.Annotations[api.ForbiddenNamespaceLabelsRegexpAnnotation]; ok {
|
|
return true
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
func (in *Tenant) hasForbiddenNamespaceAnnotationsAnnotations() bool {
|
|
if _, ok := in.Annotations[api.ForbiddenNamespaceAnnotationsAnnotation]; ok {
|
|
return true
|
|
}
|
|
|
|
if _, ok := in.Annotations[api.ForbiddenNamespaceAnnotationsRegexpAnnotation]; ok {
|
|
return true
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
func (in *Tenant) ForbiddenUserNamespaceLabels() *api.ForbiddenListSpec {
|
|
if !in.hasForbiddenNamespaceLabelsAnnotations() {
|
|
return nil
|
|
}
|
|
|
|
return &api.ForbiddenListSpec{
|
|
Exact: strings.Split(in.Annotations[api.ForbiddenNamespaceLabelsAnnotation], ","),
|
|
Regex: in.Annotations[api.ForbiddenNamespaceLabelsRegexpAnnotation],
|
|
}
|
|
}
|
|
|
|
func (in *Tenant) ForbiddenUserNamespaceAnnotations() *api.ForbiddenListSpec {
|
|
if !in.hasForbiddenNamespaceAnnotationsAnnotations() {
|
|
return nil
|
|
}
|
|
|
|
return &api.ForbiddenListSpec{
|
|
Exact: strings.Split(in.Annotations[api.ForbiddenNamespaceAnnotationsAnnotation], ","),
|
|
Regex: in.Annotations[api.ForbiddenNamespaceAnnotationsRegexpAnnotation],
|
|
}
|
|
}
|