add DNS name validation, remove TODO

Signed-off-by: liudui <[email protected]>

proxy-identity/main.go

@@ -8,6 +8,8 @@ import (
 	"errors"
 	"fmt"
 	"io/ioutil"
+	"k8s.io/apimachinery/pkg/util/validation"
+	"k8s.io/apimachinery/pkg/util/validation/field"
 	"os"
 	"path/filepath"
 	"syscall"
@@ -124,11 +126,14 @@ func generateAndStoreKey(p string) (key *ecdsa.PrivateKey, err error) {
 }
 
 func generateAndStoreCSR(p, id string, key *ecdsa.PrivateKey) ([]byte, error) {
-	// TODO do proper DNS name validation.
 	if id == "" {
 		return nil, errors.New("a non-empty identity is required")
 	}
 
+	if err := validation.IsFullyQualifiedDomainName(field.NewPath(""), id).ToAggregate(); err != nil {
+		return nil, errors.New("a qualified DNS identity is required")
+	}
+
 	csr := x509.CertificateRequest{
 		Subject:  pkix.Name{CommonName: id},
 		DNSNames: []string{id},