From a77983556f5d5467b48e4bccc41c4901825612d4 Mon Sep 17 00:00:00 2001
From: Markus Lehtonen <markus.lehtonen@intel.com>
Date: Tue, 12 Dec 2023 16:12:53 +0200
Subject: [PATCH] nfd-master: remove default denied ns from config

These are now handled by the validate package. If we have them here in
nfd-master, the default namespace (feature.node.kubernetes.io) gets
denied.
---
 pkg/nfd-master/nfd-master.go | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/pkg/nfd-master/nfd-master.go b/pkg/nfd-master/nfd-master.go
index e6f767a07..9d6fe3952 100644
--- a/pkg/nfd-master/nfd-master.go
+++ b/pkg/nfd-master/nfd-master.go
@@ -1255,10 +1255,6 @@ func (m *nfdMaster) configure(filepath string, overrides string) error {
 	normalDeniedNs, wildcardDeniedNs := preProcessDeniedNamespaces(c.DenyLabelNs)
 	m.deniedNs.normal = normalDeniedNs
 	m.deniedNs.wildcard = wildcardDeniedNs
-	// We forcibly deny kubernetes.io
-	m.deniedNs.normal[""] = struct{}{}
-	m.deniedNs.normal["kubernetes.io"] = struct{}{}
-	m.deniedNs.wildcard[".kubernetes.io"] = struct{}{}
 
 	klog.InfoS("configuration successfully updated", "configuration", utils.DelayedDumper(m.config))