Skip to content

feat: block member label modification through DP#1109

Closed
audrastump wants to merge 6 commits intoAzure:mainfrom
audrastump:main
Closed

feat: block member label modification through DP#1109
audrastump wants to merge 6 commits intoAzure:mainfrom
audrastump:main

Conversation

@audrastump
Copy link
Copy Markdown
Member

Description of your changes

Blocking users from modifying member cluster labels directly through the dataplane unless they are the RP client.

Fixes #

I have:

  • Run make reviewable to ensure this PR is ready for review.

How has this code been tested

Unit tests

Special notes for your reviewer

@audrastump audrastump changed the title Blocking label modification through DP unless RP client Blocking member label modification through DP Apr 8, 2025
@jim-minter jim-minter changed the title Blocking member label modification through DP feat: block member label modification through DP Apr 9, 2025
resourceValidator: fleetResourceValidator{
decoder: decoder,
},
wantResponse: admission.Denied(fmt.Sprintf(validation.DeniedModifyFleetLabels)),
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
wantResponse: admission.Denied(fmt.Sprintf(validation.DeniedModifyFleetLabels)),
wantResponse: admission.Denied(validation.DeniedModifyFleetLabels),

Copy link
Copy Markdown
Member

@jim-minter jim-minter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, however we mustn't merge this before the code to change labels RP side is complete and rolled out, and ideally at least CLI tooling as well.

@britaniar
Copy link
Copy Markdown
Contributor

britaniar commented Apr 9, 2025

Hi @audrastump could you take a look at the e2e tests and be sure the failures are not related to your change? Just from a glance it looks like 1 might be affected.

@michaelawyu
Copy link
Copy Markdown
Contributor

Hi Audra! I am closing this PR as Fleet has been accepted as a CNCF project and per our agreement with CNCF we will be moving to a CNCF-hosted neutral repo for future development; please consider moving (re-creating) this PR in the new repo, once the sync PR is merged. If there's any question/concern, please let me know. Thanks 🙏

@audrastump audrastump reopened this Apr 29, 2025
@audrastump audrastump closed this Apr 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants