23291310260
94%
main: 95%

Ran 19 Mar 2026 10:59AM UTC

Jobs 1

Files 157

Run time 1min

Badge

Embed ▾

Committed 19 Mar 2026 10:47AM UTC coverage: 93.822%. Remained the same

Build # 23291310260

Build Type

Pull #1545

github

Committed by

comtalyst

Commit Message

BREAKING CHANGE: restrict kubernetes.azure.com labels/taints to match AKS Machine API validation

Sync CRD validation rules with AKS RP Machine API validation to prevent
late-binding 400 errors at provisioning time. Users now get immediate
feedback at kubectl apply time when using restricted labels or taints.

Labels:
- Restrict kubernetes.azure.com/* domain with allowlist (mode, scalesetpriority,
  fips_enabled, os-sku, cluster, sku-cpu, sku-memory, ebpf-dataplane,
  cluster-health-monitor-checker-synthetic)
- Block agentpool label (AgentBaker-generated, set by system)

Taints:
- Restrict kubernetes.azure.com/* domain on taints to scalesetpriority=spot:NoSchedule
  and mode=gateway:NoSchedule (matching RP allowed system taints)
- Restrict kubernetes.azure.com/* domain on startupTaints to
  egressgateway.kubernetes.azure.com/cni-not-ready=true:NoSchedule only
- Add maxItems=100 and maxLength=253 for CEL cost budget

Validation source: AKS RP utils_agentpool.go (labels) and nodetaintsvalidator.go
(taints). Machine API reuses the same AgentPool validation pipeline.

Closes Azure/karpenter-poc#1702

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Pull Request Pull Request #1545: BREAKING CHANGE: restrict kubernetes.azure.com labels/taints to match AKS Machine API validation

Coverage Stats

58782 of 62653 relevant lines covered (93.82%)

0.95 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	23291310260.1	19 Mar 2026 10:59AM UTC	157	93.82	GitHub Action Run

Azure / karpenter-provider-azure / 23291310260
94%
main: 95%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 23291310260

Azure / karpenter-provider-azure / 23291310260 94% main: 95%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 23291310260

Azure / karpenter-provider-azure / 23291310260
94%
main: 95%

README BADGES
x