-
Notifications
You must be signed in to change notification settings - Fork 38.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve sysctl psp tests #33821
Improve sysctl psp tests #33821
Conversation
Jenkins unit/integration failed for commit 7c9aa4cc683e76755d1085c4f12c234f670437a9. Full PR test history. The magic incantation to run this job again is |
7c9aa4c
to
fb09125
Compare
@@ -577,7 +577,7 @@ func SysctlsFromPodAnnotation(annotation string) ([]Sysctl, error) { | |||
sysctls := make([]Sysctl, len(kvs)) | |||
for i, kv := range kvs { | |||
cs := strings.Split(kv, "=") | |||
if len(cs) != 2 { | |||
if len(cs) != 2 || len(cs[0]) == 0 { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Does cs[1] can be empty ?
Actually when cs[0] is empty or invalid name format, it can be validated now but cs[1] can't. http://pastebin.test.redhat.com/417014
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
An empty string is a completely valid sysctl value. Unfortunately, we hardly know anything about those values.
During alpha (when we use annotations, we deliberately assume that at least =
and ,
are no valid characters in values.
Jenkins GCI GKE smoke e2e failed for commit 8738303. Full PR test history. The magic incantation to run this job again is |
@k8s-bot gci gke e2e test this |
@k8s-bot gke e2e test this |
@k8s-bot gke e2e test this |
1 similar comment
@k8s-bot gke e2e test this |
8738303
to
e6acc08
Compare
Jenkins GKE smoke e2e failed for commit e6acc08. Full PR test history. The magic incantation to run this job again is |
@k8s-bot gke e2e test this |
lgtm |
@k8s-bot test this [submit-queue is verifying that this PR is safe to merge] |
Automatic merge from submit-queue |
What this PR does / why we need it:
Which issue this PR fixes (optional, in
fixes #<issue number>(, #<issue_number>, ...)
format, will close that issue when PR gets merged): fixes #Special notes for your reviewer:
Release note:
This change is![Reviewable](https://camo.githubusercontent.com/2d899f4291d07d3cd2fa4aaae1e3b243f164c23fce87d30a589ace0d496a444c/68747470733a2f2f72657669657761626c652e6b756265726e657465732e696f2f7265766965775f627574746f6e2e737667)