/kind feature
1. Describe IN DETAIL the feature/behavior/change you would like to see.
I would like to add Go native fuzz tests (testing.F) for the primary validation entrypoints in pkg/apis/kops/validation/.
The following fuzz targets are proposed:
FuzzValidateClusterFuzzValidateClusterUpdateFuzzValidateInstanceGroupFuzzValidateControlPlaneInstanceGroupFuzzDeepValidateFuzzValidateAdditionalObject
Seeds cover both AWS and GCE providers to exercise cloud-specific validation branches. I have already written and tested the targets locally. While running FuzzValidateClusterUpdate, a nil pointer dereference was discovered in ValidateClusterUpdate (see #XXXX).
If this proposal is accepted, I will submit a PR with the implementation. If the maintainers are open to it, I would also like to propose integrating kops into OSS-Fuzz for continuous fuzzing going forward.
2. Feel free to provide a design supporting your feature request.
Each target parses raw bytes through the same kubemanifest.LoadObjectsFrom pipeline used in production, ensuring that fuzz inputs exercise realistic code paths.
Example invocation:
go test -fuzz=^FuzzDeepValidate$ -fuzztime=60s ./pkg/apis/kops/validation/
/kind feature
1. Describe IN DETAIL the feature/behavior/change you would like to see.
I would like to add Go native fuzz tests (
testing.F) for the primary validation entrypoints inpkg/apis/kops/validation/.The following fuzz targets are proposed:
FuzzValidateClusterFuzzValidateClusterUpdateFuzzValidateInstanceGroupFuzzValidateControlPlaneInstanceGroupFuzzDeepValidateFuzzValidateAdditionalObjectSeeds cover both AWS and GCE providers to exercise cloud-specific validation branches. I have already written and tested the targets locally. While running
FuzzValidateClusterUpdate, a nil pointer dereference was discovered inValidateClusterUpdate(see #XXXX).If this proposal is accepted, I will submit a PR with the implementation. If the maintainers are open to it, I would also like to propose integrating kops into OSS-Fuzz for continuous fuzzing going forward.
2. Feel free to provide a design supporting your feature request.
Each target parses raw bytes through the same
kubemanifest.LoadObjectsFrompipeline used in production, ensuring that fuzz inputs exercise realistic code paths.Example invocation:
go test -fuzz=^FuzzDeepValidate$ -fuzztime=60s ./pkg/apis/kops/validation/