package main import ( "flag" "fmt" "io" "io/ioutil" "log" "os" "strings" "github.com/yannh/kubeconform/pkg/cache" "github.com/yannh/kubeconform/pkg/registry" "github.com/yannh/kubeconform/pkg/resource" "github.com/yannh/kubeconform/pkg/validator" ) type validationResult struct { err error skipped bool } // filter returns true if the file should be skipped // Returning an array, this Reader might container multiple resources func validateFile(f io.Reader, regs []*registry.KubernetesRegistry, k8sVersion string, skip func(signature resource.Signature)bool) []validationResult { rawResource, err := ioutil.ReadAll(f) if err != nil { return []validationResult{{err: fmt.Errorf("failed reading file: %s", err)}} } sig, err := resource.SignatureFromBytes(rawResource) if err != nil { return []validationResult{{err: fmt.Errorf("error while parsing: %s", err)}} } if skip(sig) { return []validationResult{{err: nil, skipped: true}} } var schema []byte for _, reg := range regs { downloadSchema := cache.WithCache(reg.DownloadSchema) schema, err = downloadSchema(sig.Kind, sig.Version, k8sVersion) if err == nil { break } } if err != nil { return []validationResult{{err: fmt.Errorf("error while downloading schema for resource: %s", err)}} } if err = validator.Validate(rawResource, schema); err != nil { return []validationResult{{err: err}} } return []validationResult{{err: nil}} } type arrayFiles []string func (i *arrayFiles) String() string { return "my string representation" } func (i *arrayFiles) Set(value string) error { *i = append(*i, value) return nil } func realMain() int { var files arrayFiles var skipKinds, k8sVersion string flag.Var(&files, "file", "file to validate (can be specified multiple times)") flag.StringVar(&k8sVersion, "k8sversion", "1.18.0", "version of Kubernetes to test against") flag.StringVar(&skipKinds, "skipKinds", "", "comma-separated list of kinds to ignore") flag.Parse() filter := func(signature resource.Signature) bool { kinds := strings.Split(skipKinds, ",") for _, kind := range kinds { if signature.Kind == kind { return true } } return false } for _, filename := range files { f, err := os.Open(filename) if err != nil { log.Fatalf("failed opening %s\n", filename) return 1 } defer f.Close() r := registry.NewKubernetesRegistry(false) res := validateFile(f, []*registry.KubernetesRegistry{r}, k8sVersion, filter) for _, resourceValidation := range res { if resourceValidation.skipped { log.Printf("skipping resource\n") continue } if resourceValidation.err != nil { if _, ok := resourceValidation.err.(validator.InvalidResourceError); ok { log.Printf("invalid resource: %s\n", resourceValidation.err) } else { log.Printf("failed validating resource: %s\n", resourceValidation.err) } continue } if resourceValidation.err == nil && !resourceValidation.skipped{ log.Printf("file %s is valid\n", filename) } } } return 0 } func main() { os.Exit(realMain()) }