Merge pull request #70671 from deads2k/delegated-system-master

allow delegated authorization to have privileged groups

Kubernetes-commit: 08deddfdbca9304dbe23414e3d7cd0f4a986ce45
This commit is contained in:
Kubernetes Publisher 2018-11-06 08:17:46 -08:00
commit 89d4c53a3b
2 changed files with 182 additions and 169 deletions

338
Godeps/Godeps.json generated
View File

@ -1260,679 +1260,679 @@
},
{
"ImportPath": "k8s.io/client-go/discovery",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/discovery/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/dynamic",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/admissionregistration",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/admissionregistration/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/admissionregistration/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/apps",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/apps/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/apps/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/apps/v1beta2",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/auditregistration",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/auditregistration/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/autoscaling",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/autoscaling/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/autoscaling/v2beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/autoscaling/v2beta2",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/batch",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/batch/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/batch/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/batch/v2alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/certificates",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/certificates/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/coordination",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/coordination/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/core",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/core/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/events",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/events/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/extensions",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/extensions/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/internalinterfaces",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/networking",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/networking/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/policy",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/policy/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/rbac",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/rbac/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/rbac/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/rbac/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/scheduling",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/scheduling/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/scheduling/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/settings",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/settings/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/storage",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/storage/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/storage/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/informers/storage/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/scheme",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/admissionregistration/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/admissionregistration/v1alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/admissionregistration/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/admissionregistration/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/apps/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/apps/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/apps/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/apps/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/apps/v1beta2",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/apps/v1beta2/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/auditregistration/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/auditregistration/v1alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authentication/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authentication/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authentication/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authentication/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authorization/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authorization/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authorization/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/authorization/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/autoscaling/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/autoscaling/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/autoscaling/v2beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/autoscaling/v2beta2/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/batch/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/batch/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/batch/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/batch/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/batch/v2alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/batch/v2alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/certificates/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/certificates/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/coordination/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/coordination/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/core/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/core/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/events/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/events/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/extensions/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/extensions/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/networking/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/networking/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/policy/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/policy/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/rbac/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/rbac/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/rbac/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/rbac/v1alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/rbac/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/rbac/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/scheduling/v1alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/scheduling/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/scheduling/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/settings/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/settings/v1alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/storage/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/storage/v1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/storage/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/storage/v1alpha1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/storage/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/kubernetes/typed/storage/v1beta1/fake",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/admissionregistration/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/admissionregistration/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/apps/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/apps/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/apps/v1beta2",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/auditregistration/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/autoscaling/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/autoscaling/v2beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/autoscaling/v2beta2",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/batch/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/batch/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/batch/v2alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/certificates/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/coordination/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/core/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/events/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/extensions/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/networking/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/policy/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/rbac/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/rbac/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/rbac/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/scheduling/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/scheduling/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/settings/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/storage/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/storage/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/listers/storage/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/pkg/apis/clientauthentication",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/pkg/apis/clientauthentication/v1alpha1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/pkg/apis/clientauthentication/v1beta1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/pkg/version",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/plugin/pkg/client/auth/exec",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/rest",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/rest/watch",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/testing",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/auth",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/cache",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/clientcmd",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/clientcmd/api",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/clientcmd/api/latest",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/clientcmd/api/v1",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/metrics",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/pager",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/tools/reference",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/transport",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/buffer",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/cert",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/connrotation",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/flowcontrol",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/homedir",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/integer",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/client-go/util/retry",
"Rev": "6054fbfc6590b87164caebe1aae4b14024c03066"
"Rev": "193c4639ffa27c9afcc06c3858b6da1f522b3b81"
},
{
"ImportPath": "k8s.io/kube-openapi/pkg/builder",

View File

@ -56,6 +56,9 @@ type DelegatingAuthorizationOptions struct {
// AlwaysAllowPaths are HTTP paths which are excluded from authorization. They can be plain
// paths or end in * in which case prefix-match is applied. A leading / is optional.
AlwaysAllowPaths []string
// AlwaysAllowGroups are groups which are allowed to take any actions. In kube, this is system:masters.
AlwaysAllowGroups []string
}
func NewDelegatingAuthorizationOptions() *DelegatingAuthorizationOptions {
@ -66,6 +69,12 @@ func NewDelegatingAuthorizationOptions() *DelegatingAuthorizationOptions {
}
}
// WithAlwaysAllowGroups appends the list of paths to AlwaysAllowGroups
func (s *DelegatingAuthorizationOptions) WithAlwaysAllowGroups(groups ...string) *DelegatingAuthorizationOptions {
s.AlwaysAllowGroups = append(s.AlwaysAllowGroups, groups...)
return s
}
func (s *DelegatingAuthorizationOptions) Validate() []error {
allErrors := []error{}
return allErrors
@ -115,6 +124,10 @@ func (s *DelegatingAuthorizationOptions) ApplyTo(c *server.AuthorizationInfo) er
func (s *DelegatingAuthorizationOptions) toAuthorizer(client kubernetes.Interface) (authorizer.Authorizer, error) {
var authorizers []authorizer.Authorizer
if len(s.AlwaysAllowGroups) > 0 {
authorizers = append(authorizers, authorizerfactory.NewPrivilegedGroups(s.AlwaysAllowGroups...))
}
if len(s.AlwaysAllowPaths) > 0 {
a, err := path.NewAuthorizer(s.AlwaysAllowPaths)
if err != nil {