George Pollard

controller-gen crashes in structToSchema

23

If `RawSpec` is not set on the `schemaContext`’s `info *markers.TypeInfo` member, then `structToSchema` will crash [here](https://github.com/kubernetes-sigs/controller-tools/blob/820a4a27ea84247e0da004cb4033ae9dc3839849/pkg/crd/schema.go#L330). I think the fix is probably that: ```golang if ctx.info.RawSpec.Type != structType { ```...

In the `NoBlocking` documentation (under `isActive`), it says: > Note that in the blocking implementations a `BlockedIndefinitelyOnMVar` exception is raised, so this function is unnecessary. I can't see this mentioned...

Need to handle additionalProperties in JSON serialization

7

When serializing an `ObjectType` that has an `additionalProperties` field to JSON, we need to flatten the properties inside it into the “parent” type. I’m not sure this is even possible...

Use CEL + Swagger x-ms-mutability to prevent changes to write-once properties

9

Some ARM templates have properties that can be set on creation but not modified later. What do we do about these? Does Kubernetes have support/concepts that match this?

Add some basic fuzz tests: - `FuzzDeserialization` tests deserialization - `FuzzSerialization` tests serialization (using deserialization to create an arbitrary object) - `FuzzIdempotent` ensures that serialize → deserialize gives back the...

Nuget "project centric detector" should not filter out dependencies

1

The project-centric detector filters out [a large list of dependencies by name](https://github.com/microsoft/component-detection/blob/9a5fff2af0b0d0ccbd813433d1696bbed27929bc/src/Microsoft.ComponentDetection.Detectors/nuget/NuGetProjectModelProjectCentricComponentDetector.cs#L31-L185). I think this should not be done because this filters out dependencies which have security advisories filed against...

These have been supported since VS2017 but they are not yet parsed. The lockfile contains all transitive dependencies and does not require a build to be performed in order to...

The site is linked from the repo discription but it only has documentation for 0.1. Maybe remove the link as there's already a Hackage link?

More history links to add

1

https://superuser.com/questions/784978/why-did-the-ietf-specifically-choose-192-168-16-to-be-a-private-ip-address-class https://cmpct.info/~calvin/Articles/Network10/Network10.htm

https://dhhumanist.org/volume/34/54/ (via @hwayne)