Commit Graph

49 Commits

Author SHA1 Message Date
Ryan Hitchman 4e16eae82b Escape "<>&" in apiserver errors to avoid triggering vulnerability scanners.
Simple XSS scans might fetch /<script>alert('vulnerable')</script>, and
fail when the response body includes the script tag verbatim, despite
the headers directing the browser to interpret the response as text.

This isn't a real vulnerability, but it's easier to fix this here than
it is to fix the scanners.

Kubernetes-commit: dd4bb1213d8447632fa651195980cbfae2546fb3
2017-05-12 17:30:09 +00:00
mbohlool 1ce699c0dd Add GroupVersionKind and Action extensions to OpenAPI operations
Kubernetes-commit: fca7003dc5bd122e2123ef260e8612663f74a65b
2017-05-12 17:30:09 +00:00
deads2k 4989e215f2 handle registered third parties
Kubernetes-commit: b512073457d02f326ac39d5774582a92c763c47f
2017-05-12 17:30:08 +00:00
Chao Xu e84e32eaa5 remove references to client-go/pkg/api
Kubernetes-commit: d978f22e04519f6eecfde839110c398dc28d4e8e
2017-05-03 20:36:26 +00:00
deads2k 2b31ba8b9c separate discovery from the apiserver
Kubernetes-commit: e099f5eee60ad32661d28a2eda9d615ac25ba9a4
2017-05-02 20:36:05 +00:00
Dr. Stefan Schimanski 21f84e3d21 apiserver: split endpoint tests from client-go
Kubernetes-commit: 67ca42b2d7e9efb5701618fb3d7faa62c53101c5
2017-05-02 20:36:05 +00:00
Cao Shufeng 51bdb8b7fc Fix PathPrefix for subresources
Kubernetes-commit: dde1221839a340f14924b399012e1aa137367092
2017-04-28 20:36:29 +00:00
deads2k 63fa51033e build external watch event so simple encoders can encode
Kubernetes-commit: f53c9a7e59fe71c038cf727ac2072e5eb9efc6b9
2017-04-28 20:36:29 +00:00
deads2k a32f3c1391 fix cluster scoped self-link
Kubernetes-commit: 5746d876e3e4ff41696569d3d8e80ef3979d5186
2017-04-25 20:36:18 +00:00
Anthony Yeh 9841cf11a1 PATCH: Fix erroneous meaningful conflict for numeric values.
The wrong json package was used, resulting in patches being unmarshaled
with numbers as float64 rather than int64.
This in turn confused HasConflicts() which expects numeric types to match.

The end result was false positives of meaningful conflicts, such as:

```
there is a meaningful conflict (firstResourceVersion: "8517",
currentResourceVersion: "8519"):
 diff1={"metadata":{"resourceVersion":"8519"},"spec":{"replicas":0},"status":{"conditions":null,"fullyLabeledReplicas":null,"replicas":0}}
, diff2={"spec":{"replicas":0}}
```

Kubernetes-commit: 1ab6a33db486adc060e1b63eecbdc06aabdde1f6
2017-04-24 20:36:05 +00:00
Cao Shufeng 32da3a6527 refactor code from restful namer
Some codes are replaced because they will never run.

Kubernetes-commit: 939b962975aabcb1587f40b0eb05a30d05168cc4
2017-04-24 20:36:05 +00:00
Cao Shufeng ad7e6c7d72 Update basic audit filter's comment message
Kubernetes-commit: 267288249b0dac2e7ae60bd53bef2afe8a574c28
2017-04-24 20:36:05 +00:00
Jordan Liggitt 28f3b58b8b Include system:authenticated group when impersonating
Kubernetes-commit: 86623ed2414d98d6ddc7f28028b88d17d8d8f6ec
2017-04-21 20:35:37 +00:00
gmarek 94dd05e8db Fix traces for get requests
Kubernetes-commit: 2a49281b55278bb6932e8862304cff0becaaabf3
2017-04-19 20:35:36 +00:00
xilabao fa06d09988 remove useless check in audit.go
Kubernetes-commit: 4b8abd811dbea5b92c807b64b427eab296567b1d
2017-04-18 20:35:41 +00:00
Matt Liggett 3b01985067 Use regexp instead of substring to do search and replace.
enisoc pointed out how ToLower can change (lengthen even!) the length of
a string given arbitrary input.

Kubernetes-commit: fe202fcfc47c7e0fa7d75dc933c9988bb5a53e5e
2017-04-17 20:35:48 +00:00
Mike Danese 2aab760a2a autogenerated
Kubernetes-commit: a05c3c0efdc5822049e34b1a5a1ee259c5fb1906
2017-04-15 20:35:23 +00:00
Matt Liggett 6c87ad1f20 Drop leading path of KUBECTL.EXE if it shows up in User-Agent.
Kubernetes-commit: 4cff7c3d30f4f6b4377d52ec29ec4866f1d28bb9
2017-04-14 20:35:35 +00:00
deads2k 540c5cf18e remove dependency on gorestful for rest handling
Kubernetes-commit: c5e2f7c229d8194386de97df7ff6c1b0f71be4c7
2017-04-11 20:35:21 +00:00
deads2k d3546820d7 remove go-restful from namer for rest handling
Kubernetes-commit: da27957390b99c3053922e75f220a8b09c20d7f6
2017-04-10 20:35:11 +00:00
Abhishek Dasgupta ba77f4a298 Updated key.pm and cert.pm to remove error in setting up localhostCert pool.
Signed-off-by: Abhishek Dasgupta <a10gupta@linux.vnet.ibm.com>

Kubernetes-commit: 0d42da1b9345e2a649f298ac4f77807143e7befa
2017-04-10 20:35:11 +00:00
Cao Shufeng d08e3dad61 Fix empty RBAC Forbidden message
Kubernetes-commit: 30844541d55b302b06bd85f12d8cf0193e7e4240
2017-04-08 20:35:19 +00:00
supereagle 02ca4828ef fix some typos in apiserver
Kubernetes-commit: e35b7d10821bc2c7b4b59e1da3808d46356be69d
2017-04-07 20:35:14 +00:00
Jordan Liggitt fa876f6773 Fix original object mutation on patch retry
Kubernetes-commit: c415e4aeabe5e5514dcdbf2c01c533533c25f4c1
2017-04-06 20:35:16 +00:00
Dr. Stefan Schimanski 18fcdcc57b k8s.io/apiserver: make maxRetryWhenPatchConflicts public
Kubernetes-commit: be6be1370b5d1c9b6269c24f663426e3bac93c72
2017-03-31 20:37:15 +00:00
Jordan Liggitt 8543f589d2 Ensure patched objects are defaulted correctly
Kubernetes-commit: 464db160b410b22dba53af6d11fa097f0fa4fd6b
2017-03-18 19:56:09 +00:00
Dominik Schulz 37527becd4 Clean user agent
This commit cleans common browser user-agents to reduce the metrics
cardinality in exported prometheus metrics.

Kubernetes-commit: b5c89a8be68e031e12d6750ed6cc470de4cc3fdf
2017-03-18 19:56:09 +00:00
ymqytw 7306f452f2 switch to k8s json to avoid number conversion issue
Kubernetes-commit: b29f4c26d799dca6606b45a0e03f7f931abcdefc
2017-03-18 19:56:09 +00:00
deads2k e8086d93fd show patch error as string not byte slice
Kubernetes-commit: ea887557d36cec45744c11019aa3fd64d44f24f7
2017-03-18 19:56:09 +00:00
Chao Xu a258201e01 registry changes
Kubernetes-commit: 93686da1044ea5396978a9bc86468dd3d1c32190
2017-03-18 19:56:09 +00:00
Clayton Coleman 55e799bbec Don't log context or full request URI due to security concerns
These lines may contain information that cannot be safely logged to
disk. Only deal with known parameters, also bump to V(2) to be
consistent with other logging.

Kubernetes-commit: f6300555f4c105f60c5a4cb0a0cdfc01899b833d
2017-03-18 19:56:08 +00:00
Wojciech Tyczynski 63e29dca6f Use new runtime.Object <-> map[string]interface{} converter 2017-02-27 15:10:34 -05:00
Jordan Liggitt 20015a7f72 Switch watch prefixes to params 2017-02-27 15:10:33 -05:00
nikhiljindal 6863c37d24 Update REST Handler to return 202 for cascading deletion 2017-02-27 15:10:33 -05:00
nikhiljindal 01de98ed76 Updating tests for deleted boolean from Delete() 2017-02-27 15:10:33 -05:00
nikhiljindal fee1f0dd8f Updating the registry to return whether the resource was immediately deleted 2017-02-27 15:10:33 -05:00
deads2k 1e2d8fe122 remove cycle that snuck into tests 2017-02-23 09:48:09 -05:00
deads2k 1b0d4c5781 tweak a list to a watch verb when requested 2017-02-23 09:48:09 -05:00
Wojciech Tyczynski ecdf2151f8 Revert "Use watch param instead of deprecated /watch/ prefix" 2017-02-23 09:48:09 -05:00
Jordan Liggitt 167718650d Switch watch prefixes to params 2017-02-23 09:48:09 -05:00
Dr. Stefan Schimanski 73c30cda7e staging/src/*: run gofmt 2017-02-23 09:48:09 -05:00
Jordan Liggitt 5d99edcdb1 Support PATCH operation in root proxy 2017-02-23 09:48:08 -05:00
p0lyn0mial 8dc243803d added short names for resources which are exposed during discovery 2017-02-13 07:36:41 -05:00
ymqytw 5598b36661 extract util used by jsonmergepatch and SMPatch 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski a372fcad62 Mechanical fixup imports: pkg/genericapiserver 2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski f3c3e07241 Mechanical move: pkg/genericapiserver -> k8s.io/apiserver 2017-02-13 07:36:41 -05:00
Clayton Coleman e5842f0f5f iQEcBAABCAAGBQJYhok+AAoJED0WkGtPHFyzhlMIAKUGDc5OG9u8AFgmZaRWp+ig
tTAd5vL479Y9GX0sorhbGZbXS5+ylqEfbkZQC1A4eoDOmt+dkC8jdHgUZmEwwKOM
 V/CH09SAkEa8MhxDbASV0J0oSWphMdOCMtIotB/M2S9TMNCMBDusj1VkB8kUXgKW
 MUnabb90dkFGtYWiPKNx+TVmv0T9fMWvODL24yKzLn13R+Wjk+4FfrEPFacEnsv3
 uaLAgxenhoGyf18E3d4ij6DW8c23Xrdn+s2hDL9WOtELGCUYaflU7q2Udz8DZIKu
 GLcfVzdTpcjw5Q8fdDNykxLq6+18L92V2Wj3wzWEVZmH6kVy2ty1hFY4o08/phc=
 =OL70
 -----END PGP SIGNATURE-----

refactor: move ListOptions references to metav1
2017-01-24 08:10:17 -05:00
Dr. Stefan Schimanski 855c38d53e genericapiserver: fix imports 2017-01-19 10:27:27 -05:00
Dr. Stefan Schimanski dc90e9a003 genericapiserver: move packages
Towards a sane k8s.io/apiserver package structure.
2017-01-19 10:27:27 -05:00