webhook: check duration format

l1b0k · Dec 5, 2023 · 4b998fa · 4b998fa
1 parent 4e026aa
commit 4b998fa
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/pkg/controller/webhook/validate.go b/pkg/controller/webhook/validate.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"fmt"
 	"net/http"
+	"time"
 
 	"github.com/AliyunContainerService/terway/pkg/apis/network.alibabacloud.com/v1beta1"
 
@@ -45,6 +46,15 @@ func ValidateHook() *webhook.Admission {
 			if len(podNetworking.Spec.SecurityGroupIDs) > 5 {
 				return admission.Denied("security group can not more than 5")
 			}
+
+			if podNetworking.Spec.AllocationType.ReleaseStrategy == v1beta1.IPAllocTypeFixed {
+				if podNetworking.Spec.AllocationType.ReleaseStrategy == v1beta1.ReleaseStrategyTTL {
+					_, err = time.ParseDuration(podNetworking.Spec.AllocationType.ReleaseAfter)
+					if err != nil {
+						return webhook.Denied(fmt.Sprintf("invalid releaseAfter %s", podNetworking.Spec.AllocationType.ReleaseAfter))
+					}
+				}
+			}
 			return webhook.Allowed("checked")
 		}),
 	}