Merge pull request #128038 from seans3/resource-quota-config-validation

Enable strict validation for ResourceQuotaConfiguration

staging/src/k8s.io/apiserver/pkg/admission/plugin/resourcequota/config.go

@@ -29,7 +29,7 @@ import (
 
 var (
 	scheme = runtime.NewScheme()
-	codecs = serializer.NewCodecFactory(scheme)
+	codecs = serializer.NewCodecFactory(scheme, serializer.EnableStrict)
 )
 
 func init() {

staging/src/k8s.io/apiserver/pkg/admission/plugin/resourcequota/config_test.go

@@ -43,6 +43,34 @@ func TestLoadConfiguration(t *testing.T) {
 			input:     `{"kind":"Unknown","apiVersion":"v1"}`,
 			expectErr: `no kind "Unknown" is registered`,
 		},
+		{
+			name: "duplicate field error; strict validation",
+			input: `
+kind: ResourceQuotaConfiguration
+apiVersion: apiserver.config.k8s.io/v1
+limitedResources:
+- apiGroup: ""
+  resource: persistentvolumeclaims
+  resource: persistentvolumeclaims
+  matchContains:
+  - .storageclass.storage.k8s.io/requests.storage
+`,
+			expectErr: `strict decoding error`,
+		},
+		{
+			name: "unknown field error; strict validation",
+			input: `
+kind: ResourceQuotaConfiguration
+apiVersion: apiserver.config.k8s.io/v1
+limitedResources:
+- apiGroup: ""
+  foo:      bar
+  resource: persistentvolumeclaims
+  matchContains:
+  - .storageclass.storage.k8s.io/requests.storage
+`,
+			expectErr: `strict decoding error`,
+		},
 		{
 			name: "valid v1alpha1 config",
 			input: `