75 lines
5.0 KiB
Smarty
75 lines
5.0 KiB
Smarty
{{/*
|
||
空密码信息错误。
|
||
调用：
|
||
{{- $validationError00 := include "common.validations.values.single.empty" (dict "valueKey" "path.to.password00" "secret" "secretName" "field" "password-00") -}}
|
||
{{- $validationError01 := include "common.validations.values.single.empty" (dict "valueKey" "path.to.password01" "secret" "secretName" "field" "password-01") -}}
|
||
{{ include "common.errors.upgrade.passwords.empty" (dict "validationErrors" (list $validationError00 $validationError01) "context" $) }}
|
||
参数：
|
||
- validationErrors: 字符串（必须）。待校验的字符串列表，如果为空返回错误。
|
||
- context: 上下文（必须）。父级上下文信息。
|
||
*/}}
|
||
{{- define "common.errors.upgrade.passwords.empty" -}}
|
||
{{- $validationErrors := join "" .validationErrors -}}
|
||
{{- if and $validationErrors .context.Release.IsUpgrade -}}
|
||
{{- $errorString := "\nPASSWORDS ERROR: You must provide your current passwords when upgrading the release." -}}
|
||
{{- $errorString = print $errorString "\n Note that even after reinstallation, old credentials may be needed as they may be kept in persistent volume claims." -}}
|
||
{{- $errorString = print $errorString "\n Further information can be obtained at https://docs.bitnami.com/general/how-to/troubleshoot-helm-chart-issues/#credential-errors-while-upgrading-chart-releases" -}}
|
||
{{- $errorString = print $errorString "\n%s" -}}
|
||
{{- printf $errorString $validationErrors | fail -}}
|
||
{{- end -}}
|
||
{{- end -}}
|
||
|
||
{{/*
|
||
检测官方镜像是否被替换。
|
||
可通过配置 "global.security.allowInsecureImages" 为 `true` 进行忽略。忽略时，会提示警告信息。
|
||
调用：
|
||
{{ include "common.errors.insecureImages" (dict "images" (list .Values.path.to.the.imageRoot) "context" $) }}
|
||
*/}}
|
||
{{- define "common.errors.insecureImages" -}}
|
||
{{- $relocatedImages := list -}}
|
||
{{- $replacedImages := list -}}
|
||
{{- $retaggedImages := list -}}
|
||
{{- $globalRegistry := ((.context.Values.global).imageRegistry) -}}
|
||
{{- $originalImages := .context.Chart.Annotations.images -}}
|
||
{{- range .images -}}
|
||
{{- $registryName := default .registry $globalRegistry -}}
|
||
{{- $fullImageNameNoTag := printf "%s/%s" $registryName .repository -}}
|
||
{{- $fullImageName := printf "%s:%s" $fullImageNameNoTag .tag -}}
|
||
{{- if not (contains $fullImageNameNoTag $originalImages) -}}
|
||
{{- if not (contains $registryName $originalImages) -}}
|
||
{{- $relocatedImages = append $relocatedImages $fullImageName -}}
|
||
{{- else if not (contains .repository $originalImages) -}}
|
||
{{- $replacedImages = append $replacedImages $fullImageName -}}
|
||
{{- end -}}
|
||
{{- end -}}
|
||
{{- if not (contains (printf "%s:%s" .repository .tag) $originalImages) -}}
|
||
{{- $retaggedImages = append $retaggedImages $fullImageName -}}
|
||
{{- end -}}
|
||
{{- end -}}
|
||
|
||
{{- if and (or (gt (len $relocatedImages) 0) (gt (len $replacedImages) 0)) (((.context.Values.global).security).allowInsecureImages) -}}
|
||
{{- print "\n\n⚠ SECURITY WARNING: Verifying original container images was skipped. Please note this Helm chart was designed, tested, and validated on multiple platforms using a specific set of Bitnami and Tanzu Application Catalog containers. Substituting other containers is likely to cause degraded security and performance, broken chart features, and missing environment variables.\n" -}}
|
||
{{- else if (or (gt (len $relocatedImages) 0) (gt (len $replacedImages) 0)) -}}
|
||
{{- $errorString := "Original containers have been substituted for unrecognized ones. Deploying this chart with non-standard containers is likely to cause degraded security and performance, broken chart features, and missing environment variables." -}}
|
||
{{- $errorString = print $errorString "\n\nUnrecognized images:" -}}
|
||
{{- range (concat $relocatedImages $replacedImages) -}}
|
||
{{- $errorString = print $errorString "\n - " . -}}
|
||
{{- end -}}
|
||
{{- if or (contains "registry.colovu.com/" $originalImages) (contains "registry.colovu.com/" $originalImages) -}}
|
||
{{- $errorString = print "\n\n⚠ ERROR: " $errorString -}}
|
||
{{- $errorString = print $errorString "\n\nIf you are sure you want to proceed with non-standard containers, you can skip container image verification by setting the global parameter 'global.security.allowInsecureImages' to true." -}}
|
||
{{- print $errorString | fail -}}
|
||
{{- else if gt (len $replacedImages) 0 -}}
|
||
{{- $errorString = print "\n\n⚠ WARNING: " $errorString -}}
|
||
{{- print $errorString -}}
|
||
{{- end -}}
|
||
{{- else if gt (len $retaggedImages) 0 -}}
|
||
{{- $warnString := "\n\n⚠ WARNING: Original containers have been retagged. Please note this Helm chart was tested, and validated on multiple platforms using a specific set of Tanzu Application Catalog containers. Substituting original image tags could cause unexpected behavior." -}}
|
||
{{- $warnString = print $warnString "\n\nRetagged images:" -}}
|
||
{{- range $retaggedImages -}}
|
||
{{- $warnString = print $warnString "\n - " . -}}
|
||
{{- end -}}
|
||
{{- print $warnString -}}
|
||
{{- end -}}
|
||
{{- end -}}
|