spuru9 opened a new pull request, #1213: URL: https://github.com/apache/flink-kubernetes-operator/pull/1213
## What is the purpose of the change `Inet6Address#isSiteLocalAddress()` only recognizes the deprecated `fec0::/10` prefix (removed by RFC 3879); it does not recognize the IPv6 Unique Local Address range `fc00::/7` that replaced it. This PR extends `JarUriValidationUtils#isRestricted()` to also classify `fc00::/7` addresses as restricted, alongside the existing loopback, link-local, site-local, wildcard and multicast checks. ## Brief change log - `JarUriValidationUtils#isRestricted` now additionally checks IPv6 addresses against the `fc00::/7` Unique Local Address range. - Extended `DefaultValidatorTest#testJarUriHostValidation` with cases covering IPv6 ULA literals. ## Verifying this change This change added tests and can be verified as follows: - Added unit test cases to `DefaultValidatorTest#testJarUriHostValidation` asserting that jarURIs resolving to IPv6 ULA addresses (e.g. `fd00:ec2::254`, `fc00::1`) are rejected. ## Does this pull request potentially affect one of the following parts - Dependencies (does it add or upgrade a dependency): no - The public API, i.e., is any changed class annotated with `@Public(Evolving)`: no - The serializers: no - The runtime per-record code paths (performance sensitive): no - Anything that affects deployment or recovery: JobManager (and its components), Checkpointing, Kubernetes/Docker, Zookeeper: no - The S3 file system connector: no ## Documentation - Does this pull request introduce a new feature? no -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
