com.mesosphere.sdk.config.validate

Class UserCannotChange

java.lang.Object

com.mesosphere.sdk.config.validate.UserCannotChange

All Implemented Interfaces:

ConfigValidator<ServiceSpec>

public class UserCannotChange
extends java.lang.Object
implements ConfigValidator<ServiceSpec>

Configuration validator which validates that a ServiceSpec's user cannot change between deployments. This is to prevent change in user-level permissions while accessing files across updates. If a less-privileged user replaces a more-privilege user (eg. "root" -> "nobody"), this is a breaking change as "nobody" will not have access to "root"-owned files in persistent volumes.

Constructor Summary

Constructors

Constructor and Description
UserCannotChange()

Method Summary

Modifier and Type	Method and Description
java.util.Collection<ConfigValidationError>	validate(java.util.Optional<ServiceSpec> oldConfig, ServiceSpec newConfig) Returns List of ConfigurationValidationErrors for the newly supplied Configuration object.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

UserCannotChange

public UserCannotChange()

Method Detail

validate

public java.util.Collection<ConfigValidationError> validate(java.util.Optional<ServiceSpec> oldConfig,
                                                            ServiceSpec newConfig)

Description copied from interface: ConfigValidator

Returns List of ConfigurationValidationErrors for the newly supplied Configuration object. A validation can validate a newConfig in following ways: 1. Validate newConfig parameters against the oldConfig paramater. Ex: If DiskType was ROOT in oldConfig, then it cannot be changed to, ex: MOUNT, in the newConfig. 2. Validate just newConfig parameter(s). Ex: CPU value > 0

Specified by:

validate in interface ConfigValidator<ServiceSpec>

Parameters:

oldConfig - Currently persisted Configuration, or an empty Optional if none is available (first launch of service)

newConfig - Proposed new Configuration

Returns:

List of errors, or an empty list if validation passed