update api validation on minimumKubeletVersion

Signed-off-by: Peter Hunt <[email protected]>

config/v1/tests/nodes.config.openshift.io/MinimumKubeletVersion.yaml

@@ -12,3 +12,24 @@ tests:
         apiVersion: config.openshift.io/v1
         kind: Node
         spec: {}
+    - name: Should be able to create a minimumKubeletVersion
+      initial: |
+        apiVersion: config.openshift.io/v1
+        kind: Node
+        spec:
+          minimumKubeletVersion: 1.30.0
+      expected: |
+        apiVersion: config.openshift.io/v1
+        kind: Node
+        spec:
+          minimumKubeletVersion: 1.30.0
+    - name: Should be able to create a minimumKubeletVersion
+      initial: |
+        apiVersion: config.openshift.io/v1
+        kind: Node
+        spec:
+          minimumKubeletVersion: bogus
+      expected: |
+        apiVersion: config.openshift.io/v1
+        kind: Node
+        spec: {}

config/v1/types_node.go

@@ -47,14 +47,18 @@ type NodeSpec struct {
 	// +optional
 	WorkerLatencyProfile WorkerLatencyProfileType `json:"workerLatencyProfile,omitempty"`
 
-	// MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+	// minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
 	// Specifically, the apiserver will deny most authorization requests of kubelets that are older
 	// than the specified version, only allowing the kubelet to get and update its node object, and perform
 	// subjectaccessreviews.
-	// +kubebuilder:validation:Pattern=`^[0-9]*\.[0-9]*\.[0-9]*$`
+	// This means the kubelet won't be able to view API objects it's responsible for running,
+	// and will eventually be marked as NotReady.
+	// Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+	// +kubebuilder:validation:XValidation:rule="self == \"\" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')",message="minmumKubeletVersion must be in a semver compatible format of x.y.z, or empty"
+	// +kubebuilder:validation:MaxLength:=8
 	// +openshift:enable:FeatureGate=MinimumKubeletVersion
 	// +optional
-	MinimumKubeletVersion string `json:"minimumKubeletVersion,omitempty"`
+	MinimumKubeletVersion string `json:"minimumKubeletVersion"`
 }
 
 type NodeStatus struct {

config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-CustomNoUpgrade.crd.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating

config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-DevPreviewNoUpgrade.crd.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating

config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-TechPreviewNoUpgrade.crd.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating

config/v1/zz_generated.featuregated-crd-manifests/nodes.config.openshift.io/MinimumKubeletVersion.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating

kubecontrolplane/v1/types.go

@@ -63,10 +63,12 @@ type KubeAPIServerConfig struct {
 	// TODO this needs to be removed.
 	APIServerArguments map[string]Arguments `json:"apiServerArguments"`
 
-	// MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+	// minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
 	// Specifically, the apiserver will deny most authorization requests of kubelets that are older
 	// than the specified version, only allowing the kubelet to get and update its node object, and perform
 	// subjectaccessreviews.
+	// This means the kubelet won't be able to view API objects it's responsible for running,
+	// and will eventually be marked as NotReady.
 	// +openshift:enable:FeatureGate=MinimumKubeletVersion
 	MinimumKubeletVersion string `json:"minimumKubeletVersion,omitempty"`
 }

openapi/openapi.json

@@ -8271,8 +8271,9 @@
           "type": "string"
         },
         "minimumKubeletVersion": {
-          "description": "MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews.",
-          "type": "string"
+          "description": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means the kubelet won't be able to view API objects it's responsible for running, and will eventually be marked as NotReady. Its max length is 8, so maximum version allowed is either \"9.999.99\" or \"99.99.99\".",
+          "type": "string",
+          "default": ""
         },
         "workerLatencyProfile": {
           "description": "WorkerLatencyProfile determins the how fast the kubelet is updating the status and corresponding reaction of the cluster",
@@ -14791,7 +14792,7 @@
           "$ref": "#/definitions/com.github.openshift.api.kubecontrolplane.v1.KubeletConnectionInfo"
         },
         "minimumKubeletVersion": {
-          "description": "MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews.",
+          "description": "minimumKubeletVersion is the lowest version of a kubelet that can join the cluster. Specifically, the apiserver will deny most authorization requests of kubelets that are older than the specified version, only allowing the kubelet to get and update its node object, and perform subjectaccessreviews. This means the kubelet won't be able to view API objects it's responsible for running, and will eventually be marked as NotReady.",
           "type": "string"
         },
         "oauthConfig": {

payload-manifests/crds/0000_10_config-operator_01_nodes-CustomNoUpgrade.crd.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating

payload-manifests/crds/0000_10_config-operator_01_nodes-DevPreviewNoUpgrade.crd.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating

payload-manifests/crds/0000_10_config-operator_01_nodes-TechPreviewNoUpgrade.crd.yaml

@@ -55,12 +55,19 @@ spec:
                 type: string
               minimumKubeletVersion:
                 description: |-
-                  MinimumKubeletVersion is the lowest version of a kubelet that can meaningfully join the cluster.
+                  minimumKubeletVersion is the lowest version of a kubelet that can join the cluster.
                   Specifically, the apiserver will deny most authorization requests of kubelets that are older
                   than the specified version, only allowing the kubelet to get and update its node object, and perform
                   subjectaccessreviews.
-                pattern: ^[0-9]*\.[0-9]*\.[0-9]*$
+                  This means the kubelet won't be able to view API objects it's responsible for running,
+                  and will eventually be marked as NotReady.
+                  Its max length is 8, so maximum version allowed is either "9.999.99" or "99.99.99".
+                maxLength: 8
                 type: string
+                x-kubernetes-validations:
+                - message: minmumKubeletVersion must be in a semver compatible format
+                    of x.y.z, or empty
+                  rule: self == "" || self.matches('^[0-9]*.[0-9]*.[0-9]*$')
               workerLatencyProfile:
                 description: |-
                   WorkerLatencyProfile determins the how fast the kubelet is updating