Update generated files under kyaml.

sed -i 's|version: v0.17.0|version: v0.19.8|' kyaml/yaml/internal/k8sgen/k8scopy.yaml
rm kyaml/yaml/internal/k8sgen/pkg/labels/zz_generated.deepcopy.go
(cd kyaml; make generate)

kyaml/yaml/internal/k8sgen/k8scopy.yaml

@@ -4,7 +4,7 @@
 # The files to vendor (copy).
 # See {repo}/cmd/k8scopy/main.go for more info.
 module: k8s.io/apimachinery
-version: v0.17.0
+version: v0.19.8
 packages:
 - name: pkg/labels
   files:

kyaml/yaml/internal/k8sgen/pkg/labels/copied.deepcopy.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/labels/zz_generated.deepcopy.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/labels/zz_generated.deepcopy.go
 
 // +build !ignore_autogenerated
 

kyaml/yaml/internal/k8sgen/pkg/labels/labels.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/labels/labels.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/labels/labels.go
 
 /*
 Copyright 2014 The Kubernetes Authors.
@@ -60,14 +60,22 @@ func (ls Set) Get(label string) string {
 	return ls[label]
 }
 
-// AsSelector converts labels into a selectors.
+// AsSelector converts labels into a selectors. It does not
+// perform any validation, which means the server will reject
+// the request if the Set contains invalid values.
 func (ls Set) AsSelector() Selector {
 	return SelectorFromSet(ls)
 }
 
+// AsValidatedSelector converts labels into a selectors.
+// The Set is validated client-side, which allows to catch errors early.
+func (ls Set) AsValidatedSelector() (Selector, error) {
+	return ValidatedSelectorFromSet(ls)
+}
+
 // AsSelectorPreValidated converts labels into a selector, but
-// assumes that labels are already validated and thus don't
-// preform any validation.
+// assumes that labels are already validated and thus doesn't
+// perform any validation.
 // According to our measurements this is significantly faster
 // in codepaths that matter at high scale.
 func (ls Set) AsSelectorPreValidated() Selector {

kyaml/yaml/internal/k8sgen/pkg/labels/selector.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/labels/selector.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/labels/selector.go
 
 /*
 Copyright 2014 The Kubernetes Authors.
@@ -225,7 +225,7 @@ func (r *Requirement) Matches(ls Labels) bool {
 			return false
 		}
 
-		// There should be only one strValue in r.strValues, and can be converted to a integer.
+		// There should be only one strValue in r.strValues, and can be converted to an integer.
 		if len(r.strValues) != 1 {
 			log.Printf("Invalid values count %+v of requirement %#v, for 'Gt', 'Lt' operators, exactly one value is required", len(r.strValues), r)
 			return false
@@ -873,23 +873,30 @@ func validateLabelValue(k, v string) error {
 
 // SelectorFromSet returns a Selector which will match exactly the given Set. A
 // nil and empty Sets are considered equivalent to Everything().
+// It does not perform any validation, which means the server will reject
+// the request if the Set contains invalid values.
 func SelectorFromSet(ls Set) Selector {
+	return SelectorFromValidatedSet(ls)
+}
+
+// ValidatedSelectorFromSet returns a Selector which will match exactly the given Set. A
+// nil and empty Sets are considered equivalent to Everything().
+// The Set is validated client-side, which allows to catch errors early.
+func ValidatedSelectorFromSet(ls Set) (Selector, error) {
 	if ls == nil || len(ls) == 0 {
-		return internalSelector{}
+		return internalSelector{}, nil
 	}
 	requirements := make([]Requirement, 0, len(ls))
 	for label, value := range ls {
 		r, err := NewRequirement(label, selection.Equals, []string{value})
-		if err == nil {
-			requirements = append(requirements, *r)
-		} else {
-			//TODO: double check errors when input comes from serialization?
-			return internalSelector{}
+		if err != nil {
+			return nil, err
 		}
+		requirements = append(requirements, *r)
 	}
 	// sort to have deterministic string representation
 	sort.Sort(ByKey(requirements))
-	return internalSelector(requirements)
+	return internalSelector(requirements), nil
 }
 
 // SelectorFromValidatedSet returns a Selector which will match exactly the given Set.

kyaml/yaml/internal/k8sgen/pkg/selection/operator.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/selection/operator.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/selection/operator.go
 
 /*
 Copyright 2016 The Kubernetes Authors.

kyaml/yaml/internal/k8sgen/pkg/util/errors/errors.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/util/errors/errors.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/errors/errors.go
 
 /*
 Copyright 2015 The Kubernetes Authors.
@@ -31,9 +31,14 @@ type MessageCountMap map[string]int
 
 // Aggregate represents an object that contains multiple errors, but does not
 // necessarily have singular semantic meaning.
+// The aggregate can be used with `errors.Is()` to check for the occurrence of
+// a specific error type.
+// Errors.As() is not supported, because the caller presumably cares about a
+// specific error of potentially multiple that match the given type.
 type Aggregate interface {
 	error
 	Errors() []error
+	Is(error) bool
 }
 
 // NewAggregate converts a slice of errors into an Aggregate interface, which
@@ -74,16 +79,17 @@ func (agg aggregate) Error() string {
 	}
 	seenerrs := sets.NewString()
 	result := ""
-	agg.visit(func(err error) {
+	agg.visit(func(err error) bool {
 		msg := err.Error()
 		if seenerrs.Has(msg) {
-			return
+			return false
 		}
 		seenerrs.Insert(msg)
 		if len(seenerrs) > 1 {
 			result += ", "
 		}
 		result += msg
+		return false
 	})
 	if len(seenerrs) == 1 {
 		return result
@@ -91,19 +97,33 @@ func (agg aggregate) Error() string {
 	return "[" + result + "]"
 }
 
-func (agg aggregate) visit(f func(err error)) {
+func (agg aggregate) Is(target error) bool {
+	return agg.visit(func(err error) bool {
+		return errors.Is(err, target)
+	})
+}
+
+func (agg aggregate) visit(f func(err error) bool) bool {
 	for _, err := range agg {
 		switch err := err.(type) {
 		case aggregate:
-			err.visit(f)
+			if match := err.visit(f); match {
+				return match
+			}
 		case Aggregate:
 			for _, nestedErr := range err.Errors() {
-				f(nestedErr)
+				if match := f(nestedErr); match {
+					return match
+				}
 			}
 		default:
-			f(err)
+			if match := f(err); match {
+				return match
+			}
 		}
 	}
+
+	return false
 }
 
 // Errors is part of the Aggregate interface.

kyaml/yaml/internal/k8sgen/pkg/util/sets/empty.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/util/sets/empty.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/sets/empty.go
 
 /*
 Copyright The Kubernetes Authors.

kyaml/yaml/internal/k8sgen/pkg/util/sets/string.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/util/sets/string.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/sets/string.go
 
 /*
 Copyright The Kubernetes Authors.

kyaml/yaml/internal/k8sgen/pkg/util/validation/field/errors.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/util/validation/field/errors.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/validation/field/errors.go
 
 /*
 Copyright 2014 The Kubernetes Authors.

kyaml/yaml/internal/k8sgen/pkg/util/validation/field/path.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/util/validation/field/path.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/validation/field/path.go
 
 /*
 Copyright 2015 The Kubernetes Authors.

kyaml/yaml/internal/k8sgen/pkg/util/validation/validation.go

@@ -1,5 +1,5 @@
-// Code generated by k8scopy from k8s.io/apimachinery@v0.17.0; DO NOT EDIT.
-// Copied from k8s.io/apimachinery@v0.17.0/pkg/util/validation/validation.go
+// Code generated by k8scopy from k8s.io/apimachinery@v0.19.8; DO NOT EDIT.
+// File content copied from k8s.io/apimachinery@v0.19.8/pkg/util/validation/validation.go
 
 /*
 Copyright 2014 The Kubernetes Authors.
@@ -109,9 +109,52 @@ func IsFullyQualifiedDomainName(fldPath *field.Path, name string) field.ErrorLis
 	if len(strings.Split(name, ".")) < 2 {
 		return append(allErrors, field.Invalid(fldPath, name, "should be a domain with at least two segments separated by dots"))
 	}
+	for _, label := range strings.Split(name, ".") {
+		if errs := IsDNS1123Label(label); len(errs) > 0 {
+			return append(allErrors, field.Invalid(fldPath, label, strings.Join(errs, ",")))
+		}
+	}
 	return allErrors
 }
 
+// Allowed characters in an HTTP Path as defined by RFC 3986. A HTTP path may
+// contain:
+// * unreserved characters (alphanumeric, '-', '.', '_', '~')
+// * percent-encoded octets
+// * sub-delims ("!", "$", "&", "'", "(", ")", "*", "+", ",", ";", "=")
+// * a colon character (":")
+const httpPathFmt string = `[A-Za-z0-9/\-._~%!$&'()*+,;=:]+`
+
+var httpPathRegexp = regexp.MustCompile("^" + httpPathFmt + "$")
+
+// IsDomainPrefixedPath checks if the given string is a domain-prefixed path
+// (e.g. acme.io/foo). All characters before the first "/" must be a valid
+// subdomain as defined by RFC 1123. All characters trailing the first "/" must
+// be valid HTTP Path characters as defined by RFC 3986.
+func IsDomainPrefixedPath(fldPath *field.Path, dpPath string) field.ErrorList {
+	var allErrs field.ErrorList
+	if len(dpPath) == 0 {
+		return append(allErrs, field.Required(fldPath, ""))
+	}
+
+	segments := strings.SplitN(dpPath, "/", 2)
+	if len(segments) != 2 || len(segments[0]) == 0 || len(segments[1]) == 0 {
+		return append(allErrs, field.Invalid(fldPath, dpPath, "must be a domain-prefixed path (such as \"acme.io/foo\")"))
+	}
+
+	host := segments[0]
+	for _, err := range IsDNS1123Subdomain(host) {
+		allErrs = append(allErrs, field.Invalid(fldPath, host, err))
+	}
+
+	path := segments[1]
+	if !httpPathRegexp.MatchString(path) {
+		return append(allErrs, field.Invalid(fldPath, path, RegexError("Invalid path", httpPathFmt)))
+	}
+
+	return allErrs
+}
+
 const labelValueFmt string = "(" + qualifiedNameFmt + ")?"
 const labelValueErrMsg string = "a valid label must be an empty string or consist of alphanumeric characters, '-', '_' or '.', and must start and end with an alphanumeric character"