Promote DenyInvalidExtensionResources feature gate to beta (gardene…

…r#5512)
krgostev · Apr 21, 2022 · e021f85 · e021f85
1 parent 0c4bea5
commit e021f85
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 3 deletions.
diff --git a/docs/deployment/feature_gates.md b/docs/deployment/feature_gates.md
@@ -36,7 +36,8 @@ The following tables are a summary of the feature gates that you can set on diff
 | UseDNSRecords                                | `false` | `Alpha` | `1.27` | `1.38` |
 | UseDNSRecords                                | `true`  | `Beta`  | `1.39` |        |
 | RotateSSHKeypairOnMaintenance                | `false` | `Alpha` | `1.28` |        |
-| DenyInvalidExtensionResources                | `false` | `Alpha` | `1.31` |        |
+| DenyInvalidExtensionResources                | `false` | `Alpha` | `1.31` | `1.41` |
+| DenyInvalidExtensionResources                | `true`  | `Beta`  | `1.42` |        |
 | WorkerPoolKubernetesVersion                  | `false` | `Alpha` | `1.35` |        |
 | CopyEtcdBackupsDuringControlPlaneMigration   | `false` | `Alpha` | `1.37` |        |
 | SecretBindingProviderValidation              | `false` | `Alpha` | `1.38` |        |

diff --git a/pkg/features/features.go b/pkg/features/features.go
@@ -97,6 +97,7 @@ const (
 	// DenyInvalidExtensionResources causes the seed-admission-controller to deny invalid extension resources (instead of just logging validation errors).
 	// owner: @stoyanr
 	// alpha: v1.31.0
+	// beta: v1.42.0
 	DenyInvalidExtensionResources featuregate.Feature = "DenyInvalidExtensionResources"
 
 	// WorkerPoolKubernetesVersion allows to overwrite the Kubernetes version used for shoot clusters per worker pool.

diff --git a/pkg/gardenlet/features/features.go b/pkg/gardenlet/features/features.go
@@ -33,7 +33,7 @@ var (
 		features.SeedKubeScheduler:                          {Default: false, PreRelease: featuregate.Alpha},
 		features.ReversedVPN:                                {Default: false, PreRelease: featuregate.Alpha},
 		features.UseDNSRecords:                              {Default: true, PreRelease: featuregate.Beta},
-		features.DenyInvalidExtensionResources:              {Default: false, PreRelease: featuregate.Alpha},
+		features.DenyInvalidExtensionResources:              {Default: true, PreRelease: featuregate.Beta},
 		features.CopyEtcdBackupsDuringControlPlaneMigration: {Default: false, PreRelease: featuregate.Alpha},
 		features.ForceRestore:                               {Default: false, PreRelease: featuregate.Alpha},
 		features.DisableDNSProviderManagement:               {Default: false, PreRelease: featuregate.Alpha},

diff --git a/pkg/operation/botanist/component/seedadmissioncontroller/seedadmissioncontroller_test.go b/pkg/operation/botanist/component/seedadmissioncontroller/seedadmissioncontroller_test.go
@@ -174,7 +174,7 @@ spec:
         - /gardener-seed-admission-controller
         - --port=10250
         - --tls-cert-dir=/srv/gardener-seed-admission-controller
-        - --allow-invalid-extension-resources=true
+        - --allow-invalid-extension-resources=false
         - --health-bind-address=:8081
         image: ` + image + `
         imagePullPolicy: IfNotPresent