Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Forbidden node labels and annotations #464

Merged
merged 13 commits into from
Nov 2, 2021

Conversation

MaxFedotov
Copy link
Collaborator

closes #435

@MaxFedotov MaxFedotov force-pushed the issues/435 branch 2 times, most recently from 01dd8ff to 3f8fdc4 Compare October 26, 2021 16:13
@MaxFedotov
Copy link
Collaborator Author

@prometherion need your help with tests because it is weird :(
When I run locally, everything is ok

Ran 76 of 76 Specs in 200.912 seconds
SUCCESS! -- 76 Passed | 0 Failed | 0 Pending | 0 Skipped
PASS

But on github workflows always got an error like

• Failure [0.064 seconds]
modifying node labels and annotations
/home/runner/work/capsule/capsule/e2e/node_user_metadata_test.go:20
  should fail [It]
  /home/runner/work/capsule/capsule/e2e/node_user_metadata_test.go:133

  Expected failure, but got no error.

  /home/runner/work/capsule/capsule/e2e/node_user_metadata_test.go:149

@MaxFedotov MaxFedotov force-pushed the issues/435 branch 4 times, most recently from 359d768 to 319c8fd Compare October 28, 2021 17:08
@MaxFedotov
Copy link
Collaborator Author

MaxFedotov commented Oct 28, 2021

@prometherion damn, I found out what going on with tests on 1.16 (that is the same issue I've discussed some time ago with guys from Kyverno on their slack) - we hit this kubernetes/kubernetes#100096

And as this regression isn't fixed for 1.16 and 1.17 I really don't know what to do with them - either drop their support (which may seem reasonable as these versions are obsolete for not) or just don't add this node webhook on versions that do not have this fix.

@MaxFedotov
Copy link
Collaborator Author

ok, I was able to disable this webhook for versions that don't have a fix for CVE-2021-25735. @prometherion waiting for your review.

Copy link
Member

@prometherion prometherion left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a minor concern on autogenerated files, overall LGTM!

api/v1alpha1/zz_generated.deepcopy.go Outdated Show resolved Hide resolved
docs/operator/use-cases/node-labels-and-annotations.md Outdated Show resolved Hide resolved
@MaxFedotov
Copy link
Collaborator Author

@prometherion i was on vacations, will fix everything you mentioned and merge it today in the evening

@MaxFedotov MaxFedotov merged commit 14f9686 into projectcapsule:master Nov 2, 2021
unai-ttxu pushed a commit to unai-ttxu/capsule that referenced this pull request Jun 3, 2022
* feat: forbidden node labels and annotations

* test(e2e): forbidden node labels and annotations

* build(kustomize): forbidden node labels and annotations

* build(helm): forbidden node labels and annotations

* build(installer): forbidden node labels and annotations

* chore(make): forbidden node labels and annotations

* docs: forbidden node labels and annotations

* test(e2e): forbidden node labels and annotations. Use EventuallyCreation func

* feat: forbidden node labels and annotations. Check kubernetes version

* test(e2e): forbidden node labels and annotations. Check kubernetes version

* docs: forbidden node labels and annotations. Version restrictions

* feat: forbidden node labels and annotations. Do not update deepcopy functions

* docs: forbidden node labels and annotations. Use blockquotes for notes

Co-authored-by: Maksim Fedotov <[email protected]>
unai-ttxu added a commit to unai-ttxu/capsule that referenced this pull request Jun 3, 2022
unai-ttxu added a commit to unai-ttxu/capsule that referenced this pull request Jun 3, 2022
* feat: forbidden node labels and annotations

* test(e2e): forbidden node labels and annotations

* build(kustomize): forbidden node labels and annotations

* build(helm): forbidden node labels and annotations

* build(installer): forbidden node labels and annotations

* chore(make): forbidden node labels and annotations

* docs: forbidden node labels and annotations

* test(e2e): forbidden node labels and annotations. Use EventuallyCreation func

* feat: forbidden node labels and annotations. Check kubernetes version

* test(e2e): forbidden node labels and annotations. Check kubernetes version

* docs: forbidden node labels and annotations. Version restrictions

* feat: forbidden node labels and annotations. Do not update deepcopy functions

* docs: forbidden node labels and annotations. Use blockquotes for notes

Co-authored-by: Maksim Fedotov <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Forbidden node labels and annotations
2 participants