Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
K
k3s
Project
Project
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Registry
Registry
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Jacklull
k3s
Commits
332a3e84
Commit
332a3e84
authored
May 25, 2018
by
Zihong Zheng
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
[gce provider] Add more wrapper for securiti policy
parent
86bd9771
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
97 additions
and
0 deletions
+97
-0
meta.go
pkg/cloudprovider/providers/gce/cloud/meta/meta.go
+7
-0
gce_securitypolicy.go
pkg/cloudprovider/providers/gce/gce_securitypolicy.go
+90
-0
No files found.
pkg/cloudprovider/providers/gce/cloud/meta/meta.go
View file @
332a3e84
...
@@ -345,6 +345,13 @@ var AllServices = []*ServiceInfo{
...
@@ -345,6 +345,13 @@ var AllServices = []*ServiceInfo{
version
:
VersionBeta
,
version
:
VersionBeta
,
keyType
:
Global
,
keyType
:
Global
,
serviceType
:
reflect
.
TypeOf
(
&
beta
.
SecurityPoliciesService
{}),
serviceType
:
reflect
.
TypeOf
(
&
beta
.
SecurityPoliciesService
{}),
additionalMethods
:
[]
string
{
"AddRule"
,
"GetRule"
,
"Patch"
,
"PatchRule"
,
"RemoveRule"
,
},
},
},
{
{
Object
:
"SslCertificate"
,
Object
:
"SslCertificate"
,
...
...
pkg/cloudprovider/providers/gce/gce_securitypolicy.go
0 → 100644
View file @
332a3e84
/*
Copyright 2018 The Kubernetes Authors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package
gce
import
(
"context"
computebeta
"google.golang.org/api/compute/v0.beta"
"k8s.io/kubernetes/pkg/cloudprovider/providers/gce/cloud/filter"
"k8s.io/kubernetes/pkg/cloudprovider/providers/gce/cloud/meta"
)
func
newSecurityPolicyMetricContextWithVersion
(
request
,
version
string
)
*
metricContext
{
return
newGenericMetricContext
(
"securitypolicy"
,
request
,
""
,
unusedMetricLabel
,
version
)
}
// GetBetaSecurityPolicy retrieves a security policy.
func
(
gce
*
GCECloud
)
GetBetaSecurityPolicy
(
name
string
)
(
*
computebeta
.
SecurityPolicy
,
error
)
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"get"
,
computeBetaVersion
)
v
,
err
:=
gce
.
c
.
BetaSecurityPolicies
()
.
Get
(
context
.
Background
(),
meta
.
GlobalKey
(
name
))
return
v
,
mc
.
Observe
(
err
)
}
// ListBetaSecurityPolicy lists all security policies in the project.
func
(
gce
*
GCECloud
)
ListBetaSecurityPolicy
()
([]
*
computebeta
.
SecurityPolicy
,
error
)
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"list"
,
computeBetaVersion
)
v
,
err
:=
gce
.
c
.
BetaSecurityPolicies
()
.
List
(
context
.
Background
(),
filter
.
None
)
return
v
,
mc
.
Observe
(
err
)
}
// CreateBetaSecurityPolicy creates the given security policy.
func
(
gce
*
GCECloud
)
CreateBetaSecurityPolicy
(
sp
*
computebeta
.
SecurityPolicy
)
error
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"create"
,
computeBetaVersion
)
return
mc
.
Observe
(
gce
.
c
.
BetaSecurityPolicies
()
.
Insert
(
context
.
Background
(),
meta
.
GlobalKey
(
sp
.
Name
),
sp
))
}
// DeleteBetaSecurityPolicy deletes the given security policy.
func
(
gce
*
GCECloud
)
DeleteBetaSecurityPolicy
(
name
string
)
error
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"delete"
,
computeBetaVersion
)
return
mc
.
Observe
(
gce
.
c
.
BetaSecurityPolicies
()
.
Delete
(
context
.
Background
(),
meta
.
GlobalKey
(
name
)))
}
// PatchBetaSecurityPolicy applies the given security policy as a
// patch to an existing security policy.
func
(
gce
*
GCECloud
)
PatchBetaSecurityPolicy
(
sp
*
computebeta
.
SecurityPolicy
)
error
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"patch"
,
computeBetaVersion
)
return
mc
.
Observe
(
gce
.
c
.
BetaSecurityPolicies
()
.
Patch
(
context
.
Background
(),
meta
.
GlobalKey
(
sp
.
Name
),
sp
))
}
// GetRuleForBetaSecurityPolicy gets rule from a security policy.
func
(
gce
*
GCECloud
)
GetRuleForBetaSecurityPolicy
(
name
string
)
(
*
computebeta
.
SecurityPolicyRule
,
error
)
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"get_rule"
,
computeBetaVersion
)
v
,
err
:=
gce
.
c
.
BetaSecurityPolicies
()
.
GetRule
(
context
.
Background
(),
meta
.
GlobalKey
(
name
))
return
v
,
mc
.
Observe
(
err
)
}
// AddRuletoBetaSecurityPolicy adds the given security policy rule to
// a security policy.
func
(
gce
*
GCECloud
)
AddRuletoBetaSecurityPolicy
(
name
string
,
spr
*
computebeta
.
SecurityPolicyRule
)
error
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"add_rule"
,
computeBetaVersion
)
return
mc
.
Observe
(
gce
.
c
.
BetaSecurityPolicies
()
.
AddRule
(
context
.
Background
(),
meta
.
GlobalKey
(
name
),
spr
))
}
// PatchRuleForBetaSecurityPolicy patches the given security policy
// rule to a security policy.
func
(
gce
*
GCECloud
)
PatchRuleForBetaSecurityPolicy
(
name
string
,
spr
*
computebeta
.
SecurityPolicyRule
)
error
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"patch_rule"
,
computeBetaVersion
)
return
mc
.
Observe
(
gce
.
c
.
BetaSecurityPolicies
()
.
PatchRule
(
context
.
Background
(),
meta
.
GlobalKey
(
name
),
spr
))
}
// RemoveRuleFromBetaSecurityPolicy removes rule from a security policy.
func
(
gce
*
GCECloud
)
RemoveRuleFromBetaSecurityPolicy
(
name
string
)
error
{
mc
:=
newSecurityPolicyMetricContextWithVersion
(
"remove_rule"
,
computeBetaVersion
)
return
mc
.
Observe
(
gce
.
c
.
BetaSecurityPolicies
()
.
RemoveRule
(
context
.
Background
(),
meta
.
GlobalKey
(
name
)))
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment