Skip to content

Conversation

howardjohn
Copy link
Member

Also add testing so we can catch this (though its tied to a single k8s
version, so its not perfect -- but should be able to catch most cases).

CEL before k8s 1.30 did not estimate the cost correctly so its basically
impossible

@howardjohn howardjohn requested a review from a team as a code owner May 30, 2024 14:44
@howardjohn howardjohn added the release-notes-none Indicates a PR that does not require release notes. label May 30, 2024
@istio-testing istio-testing added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label May 30, 2024
Also add testing so we can catch this (though its tied to a single k8s
version, so its not perfect -- but should be able to catch most cases).

CEL before k8s 1.30 did not estimate the cost correctly so its basically
impossible
@howardjohn
Copy link
Member Author

I have a better fix in progress (allowing us to keep the rule), happy to wait or merge as-is in the meantime

@istio-policy-bot
Copy link

🤔 🐛 You appear to be fixing a bug in Go code, yet your PR doesn't include updates to any test files. Did you forget to add a test?

Courtesy of your friendly test nag.

@jwendell
Copy link
Member

Will this fix this error?

CustomResourceDefinition.apiextensions.k8s.io "peerauthentications.security.istio.io" is invalid: [spec.validation.openAPIV3Schema.properties[spec].properties[selector].properties[matchLabels].x-kubernetes-validations[1].rule: Forbidden: estimated rule cost exceeds budget by factor of more than 100x (try simplifying the rule, or adding maxItems, maxProperties, and maxLength where arrays, maps, and strings are declared)

@howardjohn
Copy link
Member Author

yes

@howardjohn
Copy link
Member Author

/retest

@istio-testing istio-testing merged commit 1bd7c05 into istio:master May 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-notes-none Indicates a PR that does not require release notes. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants