chore(domain): added reserved domain check

Author: duanhongyi

rootfs/api/serializers.py

@@ -10,6 +10,7 @@
 import ipaddress
 from urllib.parse import urlparse
 
+from django.conf import settings
 from django.contrib.auth.models import User
 from django.utils import timezone
 from rest_framework import serializers
@@ -435,6 +436,9 @@ def validate_domain(self, value):
         if value == "*":
             raise serializers.ValidationError("Hostname can't only be a wildcard")
 
+        if value.endswith(".{}".format(settings.PLATFORM_DOMAIN)):
+            raise serializers.ValidationError("This is a reserved domain")
+
         labels = value.split('.')
 
         # Let wildcards through by not trying to validate it

rootfs/api/settings/production.py

@@ -263,7 +263,7 @@
 # experimental native ingress
 INGRESS_CLASS = os.environ.get('DRYCC_INGRESS_CLASS', '')
 
-PLATFORM_DOMAIN = os.environ.get('DRYCC_PLATFORM_DOMAIN', '')
+PLATFORM_DOMAIN = os.environ.get('DRYCC_PLATFORM_DOMAIN', 'local.drycc.cc')
 
 # k8s image policies
 SLUGRUNNER_IMAGE = os.environ.get('SLUGRUNNER_IMAGE_NAME', 'quay.io/drycc/slugrunner:canary')  # noqa

rootfs/api/tests/test_domain.py

@@ -277,6 +277,7 @@ def test_manage_domain_invalid_domain(self):
             'django.pa--assandbox',
             'too.looooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong',
             'foo.*.bar.com',
+            'test.local.drycc.cc',
             '*',
             'a' * 300,
             '.'.join(['a'] * 128)