@@ -152,9 +152,17 @@ func validateObject(obj runtime.Object) (errors field.ErrorList) {
152
152
AllowDownwardAPIHugePages : true ,
153
153
AllowInvalidPodDeletionCost : false ,
154
154
AllowIndivisibleHugePagesValues : true ,
155
- AllowWindowsHostProcessField : true ,
156
155
AllowExpandedDNSConfig : true ,
157
156
}
157
+ netValidationOptions := networking_validation.NetworkPolicyValidationOptions {
158
+ AllowInvalidLabelValueInSelector : false ,
159
+ }
160
+ pdbValidationOptions := policy_validation.PodDisruptionBudgetValidationOptions {
161
+ AllowInvalidLabelValueInSelector : false ,
162
+ }
163
+ clusterroleValidationOptions := rbac_validation.ClusterRoleValidationOptions {
164
+ AllowInvalidLabelValueInSelector : false ,
165
+ }
158
166
159
167
// Enable CustomPodDNS for testing
160
168
// feature.DefaultFeatureGate.Set("CustomPodDNS=true")
@@ -304,15 +312,15 @@ func validateObject(obj runtime.Object) (errors field.ErrorList) {
304
312
if t .Namespace == "" {
305
313
t .Namespace = api .NamespaceDefault
306
314
}
307
- errors = networking_validation .ValidateNetworkPolicy (t )
315
+ errors = networking_validation .ValidateNetworkPolicy (t , netValidationOptions )
308
316
case * policy.PodDisruptionBudget :
309
317
if t .Namespace == "" {
310
318
t .Namespace = api .NamespaceDefault
311
319
}
312
- errors = policy_validation .ValidatePodDisruptionBudget (t )
320
+ errors = policy_validation .ValidatePodDisruptionBudget (t , pdbValidationOptions )
313
321
case * rbac.ClusterRole :
314
322
// clusterole does not accept namespace
315
- errors = rbac_validation .ValidateClusterRole (t )
323
+ errors = rbac_validation .ValidateClusterRole (t , clusterroleValidationOptions )
316
324
case * rbac.ClusterRoleBinding :
317
325
// clusterolebinding does not accept namespace
318
326
errors = rbac_validation .ValidateClusterRoleBinding (t )
@@ -559,7 +567,9 @@ func TestExampleObjectSchemas(t *testing.T) {
559
567
"pod-with-affinity-anti-affinity" : {& api.Pod {}},
560
568
"pod-with-node-affinity" : {& api.Pod {}},
561
569
"pod-with-pod-affinity" : {& api.Pod {}},
570
+ "pod-with-scheduling-gates" : {& api.Pod {}},
562
571
"pod-with-toleration" : {& api.Pod {}},
572
+ "pod-without-scheduling-gates" : {& api.Pod {}},
563
573
"private-reg-pod" : {& api.Pod {}},
564
574
"share-process-namespace" : {& api.Pod {}},
565
575
"simple-pod" : {& api.Pod {}},
0 commit comments