@@ -88,17 +88,29 @@ def alpha_numeric
8888 end
8989
9090 def mutually_exclusive_fields
91- errors . add ( :base , 'Cannot associate an internal domain with an organization' ) if requested? ( :internal ) && internal == true && requested? ( :relationships )
92- errors . add ( :base , 'Internal domains cannot be associated to a router group.' ) if requested? ( :internal ) && internal == true && requested? ( :router_group )
93- errors . add ( :base , 'Internal domains cannot have route policy enforcement. Internal routes bypass GoRouter.' ) if requested? ( :internal ) && internal == true &&
94- requested? ( :enforce_route_policies ) && enforce_route_policies == true
95- errors . add ( :base , 'Domains with a router group cannot have route policy enforcement. TCP routes do not support mTLS policy enforcement.' ) if requested? ( :router_group ) &&
96- requested? ( :enforce_route_policies ) && enforce_route_policies == true
91+ validate_internal_domain_exclusions
92+ validate_router_group_exclusions
9793 return unless requested? ( :relationships ) && requested? ( :router_group )
9894
9995 errors . add ( :base , 'Domains scoped to an organization cannot be associated to a router group.' )
10096 end
10197
98+ def validate_internal_domain_exclusions
99+ return unless requested? ( :internal ) && internal == true
100+
101+ errors . add ( :base , 'Cannot associate an internal domain with an organization' ) if requested? ( :relationships )
102+ errors . add ( :base , 'Internal domains cannot be associated to a router group.' ) if requested? ( :router_group )
103+ return unless requested? ( :enforce_route_policies ) && enforce_route_policies == true
104+
105+ errors . add ( :base , 'Internal domains cannot have route policy enforcement. Internal routes bypass GoRouter.' )
106+ end
107+
108+ def validate_router_group_exclusions
109+ return unless requested? ( :router_group ) && requested? ( :enforce_route_policies ) && enforce_route_policies == true
110+
111+ errors . add ( :base , 'Domains with a router group cannot have route policy enforcement. TCP routes do not support mTLS policy enforcement.' )
112+ end
113+
102114 def router_group_validation
103115 return if router_group . nil?
104116 return errors . add ( :router_group , 'must be an object' ) unless router_group . is_a? ( Hash )
0 commit comments