Added validation to Networking Canal spec.

kubernetes · Aug 26, 2017 · 222879b · 222879b
1 parent 2fd2db2
commit 222879b
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/pkg/apis/kops/validation/legacy.go b/pkg/apis/kops/validation/legacy.go
@@ -167,6 +167,24 @@ func ValidateCluster(c *kops.Cluster, strict bool) *field.Error {
 		}
 	}
 
+	// Check Canal Networking Spec if used
+	if c.Spec.Networking.Canal != nil {
+		action := c.Spec.Networking.Canal.DefaultEndpointToHostAction
+		if action != "" {
+			found := false
+			validActions := []string{"ACCEPT", "DROP", "RETURN"}
+			for _, validAction := range validActions {
+				if action == validAction {
+					found = true
+					break
+				}
+			}
+			if !found {
+				return field.Invalid(fieldSpec.Child("Networking", "Canal", "DefaultEndpointToHostAction"), action, fmt.Sprintf("Supported values: %s", validActions))
+			}
+		}
+	}
+
 	// Check ClusterCIDR
 	if c.Spec.KubeControllerManager != nil {
 		var clusterCIDR *net.IPNet