fix: add JSON pointer escaping for pod counter annotation path (#141)

Author: 0x5457

internal/utils/jsonpatch.go

@@ -0,0 +1,14 @@
+package utils
+
+import (
+	"strings"
+)
+
+// EscapeJSONPointer escapes a string according to the JSON Pointer spec (RFC 6901).
+// It escapes '~' as '~0' and '/' as '~1'.
+func EscapeJSONPointer(s string) string {
+	// Order is important: we must escape ~ first so we don't double-escape
+	s = strings.Replace(s, "~", "~0", -1)
+	s = strings.Replace(s, "/", "~1", -1)
+	return s
+}

internal/webhook/v1/pod_webhook.go

@@ -35,6 +35,7 @@ import (
 
 	tfv1 "github.com/NexusGPU/tensor-fusion/api/v1"
 	"github.com/NexusGPU/tensor-fusion/internal/constants"
+	"github.com/NexusGPU/tensor-fusion/internal/utils"
 	"github.com/NexusGPU/tensor-fusion/internal/worker"
 	"github.com/lithammer/shortuuid/v4"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -131,7 +132,7 @@ func (m *TensorFusionPodMutator) Handle(ctx context.Context, req admission.Reque
 		// Patch annotation for pod counter
 		patch := jsonpatch.JsonPatchOperation{
 			Operation: "add",
-			Path:      "/metadata/annotations/" + constants.TensorFusionPodCounterKeyAnnotation,
+			Path:      "/metadata/annotations/" + utils.EscapeJSONPointer(constants.TensorFusionPodCounterKeyAnnotation),
 			Value:     podCounterAnnotationKey,
 		}
 		patches = append(patches, patch)