Merge pull request #108595 from cici37/updateLimit

Update CEL runtime cost limit
This commit is contained in:
Kubernetes Prow Robot 2022-03-15 04:00:11 -07:00 committed by GitHub
commit 4bca479dfb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -18,7 +18,6 @@ package cel
import ( import (
"fmt" "fmt"
"math"
"strings" "strings"
"time" "time"
@ -43,12 +42,12 @@ const (
OldScopedVarName = "oldSelf" OldScopedVarName = "oldSelf"
// PerCallLimit specify the actual cost limit per CEL validation call // PerCallLimit specify the actual cost limit per CEL validation call
//TODO: pick the number for PerCallLimit // current PerCallLimit gives roughly 0.1 second for each expression validation call
PerCallLimit = uint64(math.MaxInt64) PerCallLimit = 2000000
// RuntimeCELCostBudget is the overall cost budget for runtime CEL validation cost per CustomResource // RuntimeCELCostBudget is the overall cost budget for runtime CEL validation cost per CustomResource
//TODO: pick the RuntimeCELCostBudget // current RuntimeCELCostBudget gives roughly 1 seconds for CR validation
RuntimeCELCostBudget = math.MaxInt64 RuntimeCELCostBudget = 20000000
) )
// CompilationResult represents the cel compilation result for one rule // CompilationResult represents the cel compilation result for one rule