1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/node-feature-discovery.git synced 2024-12-14 11:57:51 +00:00
node-feature-discovery/pkg/nfd-master
Markus Lehtonen cc6c20ff5f nfd-master: disallow unprefixed and kubernetes taints
Disallow taints having a key with "kubernetes.io/" or "*.kubernetes.io/"
prefix. This is a precaution to protect the user from messing up with
the "official" well-known taints from Kubernetes itself. The only
exception is that the "nfd.node.kubernetes.io/" prefix is allowed.

However, there is one allowed NFD-specific namespace (and its
sub-namespaces) i.e. "feature.node.kubernetes.io" under the
kubernetes.io domain that can be used for NFD-managed taints.

Also disallow unprefixed taint keys. We don't add a default prefix to
unprefixed taints (like we do for labels) from NodeFeatureRules. This is
to prevent unpleasant surprises to users that need to manage matching
tolerations for their workloads.
2023-04-06 16:12:37 +03:00
..
nfd-api-controller.go nfd-master: support NodeFeature objects 2022-12-14 07:31:28 +02:00
nfd-master-internal_test.go Add master config file 2023-04-03 09:52:09 +01:00
nfd-master.go nfd-master: disallow unprefixed and kubernetes taints 2023-04-06 16:12:37 +03:00
nfd-master_test.go Add master config file 2023-04-03 09:52:09 +01:00