From d874cf8ffd888642d74d54662670aec1d6b72813 Mon Sep 17 00:00:00 2001
From: Lee Verberne <verb@google.com>
Date: Tue, 19 Oct 2021 17:27:26 -0400
Subject: [PATCH] List disallowed ephemeral container fields

Listing these explicitly makes it easier to determine whether a new
Container field has been evaluated for use with ephemeral containers.
This does not change the behavior of ephemeral containers.
---
 pkg/apis/core/validation/validation.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkg/apis/core/validation/validation.go b/pkg/apis/core/validation/validation.go
index 11fcb32908b..54dd7d9062c 100644
--- a/pkg/apis/core/validation/validation.go
+++ b/pkg/apis/core/validation/validation.go
@@ -79,9 +79,15 @@ var allowedEphemeralContainerFields = map[string]bool{
 	"Command":                  true,
 	"Args":                     true,
 	"WorkingDir":               true,
+	"Ports":                    false,
 	"EnvFrom":                  true,
 	"Env":                      true,
+	"Resources":                false,
 	"VolumeMounts":             true,
+	"LivenessProbe":            false,
+	"ReadinessProbe":           false,
+	"StartupProbe":             false,
+	"Lifecycle":                false,
 	"TerminationMessagePath":   true,
 	"TerminationMessagePolicy": true,
 	"ImagePullPolicy":          true,