Add Kubernetes pod label sanitization

What does this MR do?

Adding sanitation for kubernetes labels to avoid issues with non conformative variables. executorkubernetes

Why was this MR needed?

Currently the user needs to be careful when declaring variables in the Kubernetes labels. Such labels may not conform with the restrictions for Labels in Kubernetes which will result in a failing pipeline.

What's the best way to test this MR?

Add the following configuration to a kubernetes executor:

        [runners.kubernetes.pod_labels]
        forbidden_label = "@Hello world this value is not valid--"
        job_name = "${CI_JOB_NAME}"

The job_name can illustrate one of the possible usages.

What are the relevant issue numbers?

Closes #4565 (closed)

executors/kubernetes/util.go

@@ -349,13 +349,27 @@ func buildCapabilities(enabled map[string]bool) *api.Capabilities {
 // Sanitize labels to match Kubernetes restrictions from https://kubernetes.io/
 // /docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set
 func sanitizeLabel(value string) string {
+	mapFn := func(r rune) rune {
+		if r >= 'a' && r <= 'z' ||
+			r >= 'A' && r <= 'Z' ||
+			r >= '0' && r <= '9' ||
+			r == '-' || r == '_' || r == '.' {
+			return r
+		}
+		return '_'
+	}
+
+	// only alphanumerics, dashes (-), underscores (_), dots (.) are valid
+	value = strings.Map(mapFn, value)
+
+	// must start/end with alphanumerics only
+	value = strings.Trim(value, "-_.")
+
+	// length must be <= 63 characters
 	if len(value) > 63 {
 		value = value[:63]
 	}
 
-	re := regexp.MustCompile(`[^A-Za-z0-9-._ ]`)
-	standardized := re.ReplaceAllLiteralString(value, "")
-
-	final := strings.ReplaceAll(standardized, " ", "-")
-	return final
+	// trim again if required after shortening
+	return strings.Trim(value, "-_.")
 }