From daae4100a693e0d832a8ca7f7d615183ca4594b1 Mon Sep 17 00:00:00 2001
From: Yongrui Lin <yongrlin@outlook.com>
Date: Thu, 7 May 2026 22:15:04 +0000
Subject: [PATCH] hack: enable coverage fixture generation in update-codegen.sh

Pass -test-output-root and -test-allowlist to validation-gen so the
per-Kind coverage fixtures regenerate alongside the validators. Add the
allowlist YAML at test/declarative_validation/coverage-allowlist.yaml.
---
 hack/update-codegen.sh                        |  3 ++
 .../coverage-allowlist.yaml                   | 47 +++++++++++++++++++
 2 files changed, 50 insertions(+)
 create mode 100644 test/declarative_validation/coverage-allowlist.yaml

diff --git a/hack/update-codegen.sh b/hack/update-codegen.sh
index 49eb894f262..9e41cea2dce 100755
--- a/hack/update-codegen.sh
+++ b/hack/update-codegen.sh
@@ -465,6 +465,9 @@ function codegen::validation() {
         -v "${KUBE_VERBOSE}" \
         --go-header-file "${BOILERPLATE_FILENAME}" \
         --output-file "${output_file}" \
+        --test-output-root "test/declarative_validation" \
+        --test-output-file-prefix "${GENERATED_FILE_PREFIX}" \
+        --test-allowlist "test/declarative_validation/coverage-allowlist.yaml" \
         $(printf -- " --readonly-pkg %s" "${readonly_pkgs[@]}") \
         "${tag_pkgs[@]}" \
         "$@"
diff --git a/test/declarative_validation/coverage-allowlist.yaml b/test/declarative_validation/coverage-allowlist.yaml
new file mode 100644
index 00000000000..83c998cde40
--- /dev/null
+++ b/test/declarative_validation/coverage-allowlist.yaml
@@ -0,0 +1,47 @@
+# Suppressions for declarative-validation coverage.
+#
+# Every field is required. apiVersion matches exactly (use the standard
+# "<group>/<version>" form, or "<version>" for core). kind, path,
+# errorType, and origin match exactly OR wildcard with '*' (no implicit
+# wildcarding, so an entry can never silently overexclude). reason is
+# required.
+#
+# Example:
+#   - apiVersion: autoscaling/v1   # one specific rule
+#     kind: Scale
+#     path: spec.replicas
+#     errorType: FieldValueInvalid
+#     origin: minimum
+#     reason: tested separately
+#
+# Run hack/update-codegen.sh after editing.
+
+- apiVersion: extensions/v1beta1
+  kind: '*'
+  path: '*'
+  errorType: '*'
+  origin: '*'
+  reason: Not served by kube-apiserver.
+
+# Scale subresource: no dedicated Strategy in the new tree; tested separately
+# via VerifyVersionedValidationEquivalence (which doesn't populate the
+# in-process coverage accumulator). extensions/v1beta1/Scale is covered by
+# the group-level entry above.
+- apiVersion: autoscaling/v1
+  kind: Scale
+  path: '*'
+  errorType: '*'
+  origin: '*'
+  reason: Scale subresource has no dedicated Strategy; tested separately.
+- apiVersion: apps/v1beta1
+  kind: Scale
+  path: '*'
+  errorType: '*'
+  origin: '*'
+  reason: Scale subresource has no dedicated Strategy; tested separately.
+- apiVersion: apps/v1beta2
+  kind: Scale
+  path: '*'
+  errorType: '*'
+  origin: '*'
+  reason: Scale subresource has no dedicated Strategy; tested separately.