Cao Shufeng
aeff5f2a0a
add a regression test for Audit-ID http header
...
This change add a test for: https://github.com/kubernetes/kubernetes/pull/48492
Kubernetes-commit: a5df09ba89f4c010eed76ffd985895aa80de9845
2017-07-16 04:08:42 +00:00
Cao Shufeng
8bc6800aeb
support json output for log backend of advanced audit
...
Kubernetes-commit: bc94370e9cbf3e54dc7dab1dbfc7404815eafb4c
2017-07-16 04:08:41 +00:00
Shiyang Wang
276c240fae
Fix 401/403 apiserver errors do not return 'Status' objects
...
Kubernetes-commit: 3d6479f7216dcb61e56ab6dd53fad7176930645d
2017-07-05 23:59:23 +00:00
Cao Shufeng
755b51396c
remove useless check from impersonation filter
...
When groupsSpecified is false, that means no other groups are added
rather than the service account groups. So this check doesn't make
any sense.
Kubernetes-commit: 0a1e24f31e5dc1a4f193a6d564ed06e2535b2830
2017-07-01 08:39:43 +00:00
Chao Xu
8be42ee0d0
run hack/update-all
...
Kubernetes-commit: 60604f8818aecbc9c3736fbc32747cc0a535bc80
2017-06-28 00:14:31 +00:00
Chao Xu
81b7aaaa7d
run root-rewrite-import-client-go-api-types
...
Kubernetes-commit: f2d3220a11111f86b2f481e70e3c1ca4f5896f44
2017-06-28 00:14:31 +00:00
Cao Shufeng
c396142d93
[legacy audit] add response audit for hijack
...
Kubernetes-commit: 9212b0240de33344034c829f78a0f5c86aea6a0d
2017-06-13 20:47:32 +00:00
deads2k
7e0854d484
test header removal for impersonation
...
Kubernetes-commit: 38c25393df7bddd8356126634d70aa333ca1ac3b
2017-06-13 20:47:32 +00:00
Cao Shufeng
42b5738617
fix invalid status code for hijacker
...
When using hijacker to take over the connection, the http status code
should be 101 not 200.
PS:
Use "kubectl exec" as an example to review this change.
Kubernetes-commit: 541935b13f87e55199840a73cd3f158e7f0d7b63
2017-06-13 20:47:31 +00:00
Cao Shufeng
89caee803d
update copyed doc for advanced audit
...
doc for WithAudit is copyed from WithLegacyAudit, it's out of date.
This change update doc for these two functions.
Kubernetes-commit: 82390af25083031e244107527fe5d9491ade937b
2017-06-13 20:47:30 +00:00
Tim St. Clair
91a3addb8d
Instrument advanced auditing
...
Kubernetes-commit: b77c8198f002f9a9c7bdca11d28cac1710bbb185
2017-06-13 20:47:30 +00:00
Dr. Stefan Schimanski
a177d01bf0
audit: uniform 2 or 3 events for short/long running requests
...
Kubernetes-commit: 548f7be8fa10b6cbedcf179af088536e76a6c0e3
2017-06-13 20:47:29 +00:00
Dr. Stefan Schimanski
636c532e31
audit: fill in stage
...
Kubernetes-commit: 1e94185f4425551f1c81ba7bbdbae110bc317abd
2017-06-13 20:47:29 +00:00
Tim St. Clair
a54d901fa7
Fix audit level none
...
Kubernetes-commit: 93e1e54e290325d82e41d50f64057323879bdef2
2017-06-13 20:47:29 +00:00
Tim St. Clair
8ff532a4cb
Implement audit policy logic
...
Kubernetes-commit: a5de309ee261aea15bb1cc12647b32640c2ac196
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski
94ea219615
Update bazel
...
Kubernetes-commit: 9fdc36a47ada0bc34ee53b68edd085d368ed9012
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski
f7d766d92d
audit: add audit event to the context and fill in handlers
...
Kubernetes-commit: 0b5bcb021932355b3ff7c2b45fb579f4adad84bf
2017-06-13 20:47:28 +00:00
Chao Xu
3ffeae2ff7
hack/update-bazel.sh
...
Kubernetes-commit: 14045d253d11c801ad94f0928cb9b13a224ee18f
2017-05-13 17:27:43 +00:00
Chao Xu
e46eb82a82
remove invocation of k8s.io/client-go/pkg/api/install
...
change import of client-go/api/helper to kubernetes/api/helper
remove unnecessary use of client-go/api.registry
change use of client-go/pkg/util to kubernetes/pkg/util
remove dependency on client-go/pkg/apis/extensions
remove unnecessary invocation of k8s.io/client-go/extension/intsall
change use of k8s.io/client-go/pkg/apis/authentication to v1
Kubernetes-commit: c354076aa41e3cf417b291d5f0eff2b70395ac30
2017-05-13 17:27:42 +00:00
Chao Xu
e84e32eaa5
remove references to client-go/pkg/api
...
Kubernetes-commit: d978f22e04519f6eecfde839110c398dc28d4e8e
2017-05-03 20:36:26 +00:00
Cao Shufeng
ad7e6c7d72
Update basic audit filter's comment message
...
Kubernetes-commit: 267288249b0dac2e7ae60bd53bef2afe8a574c28
2017-04-24 20:36:05 +00:00
Jordan Liggitt
28f3b58b8b
Include system:authenticated group when impersonating
...
Kubernetes-commit: 86623ed2414d98d6ddc7f28028b88d17d8d8f6ec
2017-04-21 20:35:37 +00:00
xilabao
fa06d09988
remove useless check in audit.go
...
Kubernetes-commit: 4b8abd811dbea5b92c807b64b427eab296567b1d
2017-04-18 20:35:41 +00:00
Mike Danese
2aab760a2a
autogenerated
...
Kubernetes-commit: a05c3c0efdc5822049e34b1a5a1ee259c5fb1906
2017-04-15 20:35:23 +00:00
deads2k
1e2d8fe122
remove cycle that snuck into tests
2017-02-23 09:48:09 -05:00
Dr. Stefan Schimanski
73c30cda7e
staging/src/*: run gofmt
2017-02-23 09:48:09 -05:00
Dr. Stefan Schimanski
a372fcad62
Mechanical fixup imports: pkg/genericapiserver
2017-02-13 07:36:41 -05:00
Dr. Stefan Schimanski
f3c3e07241
Mechanical move: pkg/genericapiserver -> k8s.io/apiserver
2017-02-13 07:36:41 -05:00