external-dns/pkg/apis/externaldns/validation/validation.go

/*
Copyright 2017 The Kubernetes Authors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package validation

import (
	"errors"
	"fmt"

	"k8s.io/apimachinery/pkg/labels"

	"sigs.k8s.io/external-dns/pkg/apis/externaldns"
)

// ValidateConfig performs validation on the Config object
func ValidateConfig(cfg *externaldns.Config) error {
	// TODO: Should probably return field.ErrorList
	if cfg.LogFormat != "text" && cfg.LogFormat != "json" {
		return fmt.Errorf("unsupported log format: %s", cfg.LogFormat)
	}
	if len(cfg.Sources) == 0 {
		return errors.New("no sources specified")
	}
	if cfg.Provider == "" {
		return errors.New("no provider specified")
	}

	// Azure provider specific validations
	if cfg.Provider == "azure" {
		if cfg.AzureConfigFile == "" {
			return errors.New("no Azure config file specified")
		}
	}

	// Akamai provider specific validations
	if cfg.Provider == "akamai" {
		if cfg.AkamaiServiceConsumerDomain == "" && cfg.AkamaiEdgercPath != "" {
			return errors.New("no Akamai ServiceConsumerDomain specified")
		}
		if cfg.AkamaiClientToken == "" && cfg.AkamaiEdgercPath != "" {
			return errors.New("no Akamai client token specified")
		}
		if cfg.AkamaiClientSecret == "" && cfg.AkamaiEdgercPath != "" {
			return errors.New("no Akamai client secret specified")
		}
		if cfg.AkamaiAccessToken == "" && cfg.AkamaiEdgercPath != "" {
			return errors.New("no Akamai access token specified")
		}
	}

	// Infoblox provider specific validations
	if cfg.Provider == "infoblox" {
		if cfg.InfobloxGridHost == "" {
			return errors.New("no Infoblox Grid Manager host specified")
		}
		if cfg.InfobloxWapiPassword == "" {
			return errors.New("no Infoblox WAPI password specified")
		}
	}

	if cfg.Provider == "dyn" {
		if cfg.DynUsername == "" {
			return errors.New("no Dyn username specified")
		}
		if cfg.DynCustomerName == "" {
			return errors.New("no Dyn customer name specified")
		}

		if cfg.DynMinTTLSeconds < 0 {
			return errors.New("TTL specified for Dyn is negative")
		}
	}

	if cfg.Provider == "rfc2136" {
		if cfg.RFC2136MinTTL < 0 {
			return errors.New("TTL specified for rfc2136 is negative")
		}

		if cfg.RFC2136Insecure && cfg.RFC2136GSSTSIG {
			return errors.New("--rfc2136-insecure and --rfc2136-gss-tsig are mutually exclusive arguments")
		}

		if cfg.RFC2136GSSTSIG {
			if cfg.RFC2136KerberosPassword == "" || cfg.RFC2136KerberosUsername == "" || cfg.RFC2136KerberosRealm == "" {
				return errors.New("--rfc2136-kerberos-realm, --rfc2136-kerberos-username, and --rfc2136-kerberos-password are required when specifying --rfc2136-gss-tsig option")
			}
		}

		if cfg.RFC2136BatchChangeSize < 1 {
			return errors.New("batch size specified for rfc2136 cannot be less than 1")
		}
	}

	if cfg.IgnoreHostnameAnnotation && cfg.FQDNTemplate == "" {
		return errors.New("FQDN Template must be set if ignoring annotations")
	}

	if len(cfg.TXTPrefix) > 0 && len(cfg.TXTSuffix) > 0 {
		return errors.New("txt-prefix and txt-suffix are mutual exclusive")
	}

	_, err := labels.Parse(cfg.LabelFilter)
	if err != nil {
		return errors.New("--label-filter does not specify a valid label selector")
	}
	return nil
}