f54098fe00
This works by defining two 'static' lists in hack. The first is the list of all flags in the project which use a `-` or an `_` in their name. All files being processed by verify-flags-underscore.py (or all files in the repo if no filename arguments are given) will be searched for flag declaration using a simple regex. Its not super smart. If a flag is found which is not in the static list it will complain/reject the commit until a human adds it to the list. If we do not keep a static list of flags it takes >.2 seconds to find them 'all' at runtime. Since this is run in pre-commit saving every part of a second helps. After it finds all of the flags it runs all of the arguments (or all files in repo if no arguments) looking for usage of those flags which includes an `_`. There are lots of places where these are false positives. For example we have a flag named oom-adj-score but the kernel calls it oom_adj_score. To handle this we keep a second 'whitelist' of lines which are allowed to use these flag names with an `_`. Running the entire git repo looking for flags in every golang file and looking in every single file for bad usage takes about 8.75 seconds. Running it in the precommit hook where we only check things that changed takes about .06 seconds.
269 lines
4.4 KiB
Plaintext
269 lines
4.4 KiB
Plaintext
accept-hosts
|
|
accept-paths
|
|
admission-control
|
|
admission-control-config-file
|
|
advertise-address
|
|
advertised-address
|
|
algorithm-provider
|
|
all-namespaces
|
|
allocate-node-cidrs
|
|
allow-privileged
|
|
api-burst
|
|
api-prefix
|
|
api-rate
|
|
api-servers
|
|
api-token
|
|
api-version
|
|
authorization-mode
|
|
authorization-policy-file
|
|
auth-path
|
|
basic-auth-file
|
|
bench-pods
|
|
bench-quiet
|
|
bench-tasks
|
|
bench-workers
|
|
bind-address
|
|
bind-pods-burst
|
|
bind-pods-qps
|
|
cadvisor-port
|
|
cert-dir
|
|
certificate-authority
|
|
cgroup-prefix
|
|
cgroup-root
|
|
chaos-chance
|
|
check_version_skew
|
|
client-ca-file
|
|
client-certificate
|
|
client-key
|
|
cloud-config
|
|
cloud-provider
|
|
cluster-cidr
|
|
cluster-dns
|
|
cluster-domain
|
|
cluster-name
|
|
cluster-tag
|
|
concurrent-endpoint-syncs
|
|
concurrent_rc_syncs
|
|
configure-cbr0
|
|
container-port
|
|
container-runtime
|
|
cors-allowed-origins
|
|
create-external-load-balancer
|
|
current-release-pr
|
|
current-replicas
|
|
default-container-cpu-limit
|
|
default-container-mem-limit
|
|
deleting-pods-burst
|
|
deleting-pods-qps
|
|
deployment-label-key
|
|
dest-file
|
|
disable-filter
|
|
docker-endpoint
|
|
docker-exec-handler
|
|
driver-port
|
|
dry-run
|
|
dry-run
|
|
dry-run
|
|
dry-run
|
|
duration-sec
|
|
e2e-output-dir
|
|
enable-debugging-handlers
|
|
enable-server
|
|
etcd-config
|
|
etcd_mutation_timeout
|
|
etcd-prefix
|
|
etcd-server
|
|
etcd-servers
|
|
event-ttl
|
|
executor-bindall
|
|
executor-cgroup-prefix
|
|
executor-logv
|
|
executor-path
|
|
executor-suicide-timeout
|
|
experimental-prefix
|
|
external-hostname
|
|
failover-timeout
|
|
file-check-frequency
|
|
file_content
|
|
file_mode
|
|
file_perm
|
|
file-suffix
|
|
forward-services
|
|
framework-name
|
|
framework-weburi
|
|
fs_type
|
|
func-dest
|
|
fuzz-iters
|
|
gce-project
|
|
gce-zone
|
|
gke-cluster
|
|
gke_context
|
|
google-json-key
|
|
grace-period
|
|
grace-period
|
|
grace-period
|
|
ha-domain
|
|
healthz-bind-address
|
|
healthz-port
|
|
hostname-override
|
|
host-network-sources
|
|
host_port_endpoints
|
|
http-check-frequency
|
|
http-port
|
|
ignore-not-found
|
|
ignore-not-found
|
|
image-gc-high-threshold
|
|
image-gc-low-threshold
|
|
insecure-bind-address
|
|
insecure-port
|
|
insecure-skip-tls-verify
|
|
jenkins-host
|
|
jenkins-jobs
|
|
km-path
|
|
kubecfg_file
|
|
kubectl-path
|
|
kubelet-cadvisor-port
|
|
kubelet-certificate-authority
|
|
kubelet-client-certificate
|
|
kubelet-client-key
|
|
kubelet-docker-endpoint
|
|
kubelet-host-network-sources
|
|
kubelet-https
|
|
kubelet-network-plugin
|
|
kubelet-pod-infra-container-image
|
|
kubelet-port
|
|
kubelet-root-dir
|
|
kubelet-sync-frequency
|
|
kubelet-timeout
|
|
kube-master
|
|
kube_master_url
|
|
label-columns
|
|
last-release-pr
|
|
legacy-userspace-proxy
|
|
log_flush_frequency
|
|
long-running-request-regexp
|
|
low-diskspace-threshold-mb
|
|
manifest-url
|
|
manifest-url-header
|
|
master-service-namespace
|
|
max-concurrency
|
|
max-connection-bytes-per-sec
|
|
maximum-dead-containers
|
|
maximum-dead-containers-per-container
|
|
max_in_flight
|
|
max-log-age
|
|
max-log-backups
|
|
max-log-size
|
|
max-outgoing-burst
|
|
max-outgoing-qps
|
|
max_par
|
|
max-pods
|
|
max-requests-inflight
|
|
mesos-authentication-principal
|
|
mesos-authentication-provider
|
|
mesos-authentication-secret-file
|
|
mesos-master
|
|
mesos-role
|
|
mesos-user
|
|
minimum-container-ttl-duration
|
|
minion-max-log-age
|
|
minion-max-log-backups
|
|
minion-max-log-size
|
|
min-pr-number
|
|
min-request-timeout
|
|
namespace-sync-period
|
|
network-plugin
|
|
network-plugin-dir
|
|
new_file_0644
|
|
new_file_0666
|
|
new_file_0777
|
|
node-instance-group
|
|
node-monitor-grace-period
|
|
node-monitor-period
|
|
node-startup-grace-period
|
|
node-status-update-frequency
|
|
node-sync-period
|
|
no-headers
|
|
num-nodes
|
|
oom-score-adj
|
|
output-version
|
|
out-version
|
|
pod-cidr
|
|
pod-eviction-timeout
|
|
pod-infra-container-image
|
|
pods_per_node
|
|
pods_per_node
|
|
policy-config-file
|
|
poll-interval
|
|
portal-net
|
|
private-mountns
|
|
prom-push-gateway
|
|
proxy-bindall
|
|
proxy-logv
|
|
proxy-port-range
|
|
public-address-override
|
|
public-ip
|
|
pvclaimbinder-sync-period
|
|
read-only-port
|
|
really-crash-for-testing
|
|
reconcile-cooldown
|
|
reconcile-interval
|
|
register-node
|
|
register-retry-count
|
|
registry-burst
|
|
registry-qps
|
|
reject-methods
|
|
reject-paths
|
|
repo-root
|
|
report-dir
|
|
required-contexts
|
|
resource-container
|
|
resource-quota-sync-period
|
|
resource-version
|
|
root-ca-file
|
|
root-dir
|
|
run-proxy
|
|
runtime-config
|
|
scheduler-config
|
|
secure-port
|
|
service-account-key-file
|
|
service-account-lookup
|
|
service-account-private-key-file
|
|
service-address
|
|
service-cluster-ip-range
|
|
service-node-port-range
|
|
service-node-ports
|
|
service-sync-period
|
|
session-affinity
|
|
shutdown-fd
|
|
shutdown-fifo
|
|
skip-munges
|
|
source-file
|
|
ssh-keyfile
|
|
ssh-user
|
|
static-pods-config
|
|
stats-port
|
|
storage-version
|
|
streaming-connection-idle-timeout
|
|
suicide-timeout
|
|
sync-frequency
|
|
system-container
|
|
target-port
|
|
tcp-services
|
|
test_args
|
|
tls-cert-file
|
|
tls-private-key-file
|
|
token-auth-file
|
|
ttl-secs
|
|
unix-socket
|
|
update-period
|
|
upgrade-target
|
|
up_to
|
|
up_to
|
|
use-kubernetes-cluster-service
|
|
user-whitelist
|
|
valid_flag
|
|
watch-only
|
|
whitelist-override-label
|
|
www-prefix
|