github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-19 18:02:01 +00:00
Code Issues Projects Releases Wiki Activity

validate nodeLabels in kubelet

Browse Source 
Signed-off-by: Soh Takada <34182539+FeLvi-zzz@users.noreply.github.com>
This commit is contained in:
Soh Takada 2022-04-03 14:08:21 +09:00
parent c6153a93d0
commit 5ec2aaa339
2 changed files with 24 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
cmd/kubelet/app/options/options.go
View File

@ -26,6 +26,7 @@ import (
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
"k8s.io/apimachinery/pkg/util/sets"
"k8s.io/apimachinery/pkg/util/validation"
utilfeature "k8s.io/apiserver/pkg/util/feature"
cliflag "k8s.io/component-base/cli/flag"
"k8s.io/component-base/logs"
@ -159,14 +160,29 @@ func NewKubeletFlags() *KubeletFlags {
// ValidateKubeletFlags validates Kubelet's configuration flags and returns an error if they are invalid.
func ValidateKubeletFlags(f *KubeletFlags) error {
unknownLabels := sets.NewString()
for k := range f.NodeLabels {
invalidLabelErrs := make(map[string][]string)
for k, v := range f.NodeLabels {
if isKubernetesLabel(k) && !kubeletapis.IsKubeletLabel(k) {
unknownLabels.Insert(k)
}
if errs := validation.IsQualifiedName(k); len(errs) > 0 {
invalidLabelErrs[k] = append(invalidLabelErrs[k], errs...)
}
if errs := validation.IsValidLabelValue(v); len(errs) > 0 {
invalidLabelErrs[v] = append(invalidLabelErrs[v], errs...)
}
}
if len(unknownLabels) > 0 {
return fmt.Errorf("unknown 'kubernetes.io' or 'k8s.io' labels specified with --node-labels: %v\n--node-labels in the 'kubernetes.io' namespace must begin with an allowed prefix (%s) or be in the specifically allowed set (%s)", unknownLabels.List(), strings.Join(kubeletapis.KubeletLabelNamespaces(), ", "), strings.Join(kubeletapis.KubeletLabels(), ", "))
}
if len(invalidLabelErrs) > 0 {
labelErrs := []string{}
for k, v := range invalidLabelErrs {
labelErrs = append(labelErrs, fmt.Sprintf("'%s' - %s", k, strings.Join(v, ", ")))
}
return fmt.Errorf("invalid node labels: %s", strings.Join(labelErrs, "; "))
}
if f.SeccompDefault && !utilfeature.DefaultFeatureGate.Enabled(features.SeccompDefault) {
return fmt.Errorf("the SeccompDefault feature gate must be enabled in order to use the --seccomp-default flag")

7
cmd/kubelet/app/options/options_test.go
View File

@ -168,6 +168,13 @@ func TestValidateKubeletFlags(t *testing.T) {
error: false,
labels: map[string]string{},
},
{
name: "Invalid label",
error: true,
labels: map[string]string{
"cloud.google.com/repository": "kubernetes/kubernetes",
},
},
}
for _, tt := range tests {