UPSTREAM: <carry>: noderestrictions: add node-role.kubernetes.io/* to…

… allowed node labels Server side validation of node labels was added in kubernetes#90307. We only disabled kubelet-side validation before to make our node role labels work.
openshift · Sep 8, 2021 · f30ef8f · f30ef8f
1 parent 3b09b50
commit f30ef8f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/kubelet/apis/well_known_labels.go b/pkg/kubelet/apis/well_known_labels.go
@@ -45,6 +45,11 @@ var kubeletLabels = sets.NewString(
 
 	LabelOS,
 	LabelArch,
+
+	// These are special for OpenShift:
+	"node-role.kubernetes.io/master",
+	"node-role.kubernetes.io/worker",
+	"node-role.kubernetes.io/etcd",
 )
 
 var kubeletLabelNamespaces = sets.NewString(