Commit Graph

111 Commits

Author SHA1 Message Date
Dr. Stefan Schimanski 36b2f4560f deepcopy: add interface deepcopy funcs
- add DeepCopyObject() to runtime.Object interface
- add DeepCopyObject() via deepcopy-gen
- add DeepCopyObject() manually
- add DeepCopySelector() to selector interfaces
- add custom DeepCopy func for TableRow.Cells

Kubernetes-commit: 39d95b9b065fffebe5b6f233d978fe1723722085
2017-07-19 03:49:08 +00:00
jianglingxia 57a29126d7 amend the comment
Kubernetes-commit: fe13072443289a87ac2bf89fa7818f0ba8a5c64d
2017-07-19 03:49:08 +00:00
Cao Shufeng aeff5f2a0a add a regression test for Audit-ID http header
This change add a test for: https://github.com/kubernetes/kubernetes/pull/48492

Kubernetes-commit: a5df09ba89f4c010eed76ffd985895aa80de9845
2017-07-16 04:08:42 +00:00
Clayton Coleman ec4f695076 generated: bazel / godeps
Kubernetes-commit: c73622108ccd285b245cf9fe2dc218a47398d31d
2017-07-16 04:08:42 +00:00
Dr. Stefan Schimanski 5c33fc4de4 apimachinery: remove unneeded GetObjectKind() impls
Kubernetes-commit: da3322c2d93671b7cbff9b090dd5e1ce9984130e
2017-07-16 04:08:42 +00:00
Dr. Stefan Schimanski 51b28748a4 Update generated files
Kubernetes-commit: d358cb168d60deec2c84b68003680307a6565bbd
2017-07-16 04:08:42 +00:00
Dr. Stefan Schimanski 15712b92c3 apimachinery+apiserver: extract test types to work w/ deepcopy-gen
Kubernetes-commit: 205cd90d465b7287fdad5f77d1dc4ac13624b067
2017-07-16 04:08:41 +00:00
Cao Shufeng 7723f2ca07 remove extra WriteHeader function
The deleted two functions will be called later in the function
SerializeObject(). Not necessary to call them twice.

Kubernetes-commit: f41eb67798c574b531b5dd542d3284604b142801
2017-07-16 04:08:41 +00:00
Cao Shufeng 8bc6800aeb support json output for log backend of advanced audit
Kubernetes-commit: bc94370e9cbf3e54dc7dab1dbfc7404815eafb4c
2017-07-16 04:08:41 +00:00
Clayton Coleman bcc0d0a6d0 Unify generic proxy code in apimachinery
Make the utility package truly generic, consolidate all generic proxy in
apimachinery.

Kubernetes-commit: edc12aafe2fbfe3475bdf03c34ffa26cc4322673
2017-07-16 04:08:41 +00:00
Clayton Coleman c521c8f6b5 Record 429 and timeout errors to prometheus
Allows gathering of load being shed.

Kubernetes-commit: 2e33a2f0bc8ac82aecadcb19cf6e41259454d182
2017-07-16 04:08:41 +00:00
deads2k aa72cc77b2 remove dead code
Kubernetes-commit: 0801ded4252684c47d8a50700f9f5ff8ff88b964
2017-07-16 04:08:41 +00:00
Cao Shufeng 6040aeb60d Fix invalid Content-Type for 403 error
https://github.com/kubernetes/kubernetes/pull/47384 makes 403 errors
return Status Object. How the Content-Type is still "text/plain"
This change fix it.

Kubernetes-commit: 36e0a5ed14ae0fb9fd88980f0fce57d076216e2e
2017-07-06 23:56:07 +00:00
Shiyang Wang 276c240fae Fix 401/403 apiserver errors do not return 'Status' objects
Kubernetes-commit: 3d6479f7216dcb61e56ab6dd53fad7176930645d
2017-07-05 23:59:23 +00:00
Cao Shufeng 755b51396c remove useless check from impersonation filter
When groupsSpecified is false, that means no other groups are added
rather than the service account groups. So this check doesn't make
any sense.

Kubernetes-commit: 0a1e24f31e5dc1a4f193a6d564ed06e2535b2830
2017-07-01 08:39:43 +00:00
Kyâne Pichou a0b4bc5639 Fix a typo in deletion log of apiserver
Kubernetes-commit: 7adf8d8cac89eb68bc10a58827ef08e74e047913
2017-07-01 08:39:43 +00:00
Mikhail Mazurskiy 7039fe1e17 Refactor unstructured converter
Kubernetes-commit: dc1ee493a29251492403e4282b5df3e897de2214
2017-06-30 08:44:46 +00:00
Scott Weiss b74e5942e2 add compression to GET and LIST api requests
this feature is gated; disabled by default

Kubernetes-commit: c305f72315a83c16c40fbbfd06b563f9e67208ff
2017-06-28 00:14:31 +00:00
Chao Xu 8be42ee0d0 run hack/update-all
Kubernetes-commit: 60604f8818aecbc9c3736fbc32747cc0a535bc80
2017-06-28 00:14:31 +00:00
Chao Xu 0fc5fed423 manually fix openapi-gen
Kubernetes-commit: 4379bbdafbd38bdc67f2ceb5cb7a4e778baebf04
2017-06-28 00:14:31 +00:00
Chao Xu 230d302a85 manually fix kubectl openapi unit test
Kubernetes-commit: 239613b521b5180d01d2de004e793234bfa6be07
2017-06-28 00:14:31 +00:00
Chao Xu 81b7aaaa7d run root-rewrite-import-client-go-api-types
Kubernetes-commit: f2d3220a11111f86b2f481e70e3c1ca4f5896f44
2017-06-28 00:14:31 +00:00
Jordan Liggitt 63a940e4f9 Remove redirect verb parsing
Kubernetes-commit: e8b24679dc457d3321073b9ae8e1c17a1763c56a
2017-06-28 00:14:31 +00:00
Jordan Liggitt 3d01cde9c2 Fix rawextension decoding in update
Kubernetes-commit: a536ee3615e15954c63b0ccea0885837e2846e1e
2017-06-22 04:00:53 +00:00
Tim St. Clair 64014c6e25 audit: Fill in full ObjectRef, include in LevelMetadata
Kubernetes-commit: 28beb4572e676b9073f400fb6ccf2720381a41d0
2017-06-14 20:44:08 +00:00
Jordan Liggitt e4286c2402 Revert "add gzip compression to GET and LIST requests"
This reverts commit fc650a54d02f358c7fc65fa25b8312028bd4e944.

Kubernetes-commit: 63e3e2fa7b04bd3d3f1fccb63391f17ea01e06a8
2017-06-13 20:47:32 +00:00
Cao Shufeng c396142d93 [legacy audit] add response audit for hijack
Kubernetes-commit: 9212b0240de33344034c829f78a0f5c86aea6a0d
2017-06-13 20:47:32 +00:00
deads2k 7e0854d484 test header removal for impersonation
Kubernetes-commit: 38c25393df7bddd8356126634d70aa333ca1ac3b
2017-06-13 20:47:32 +00:00
Scott Weiss 8c02c5efc4 add gzip compression to GET and LIST requests
closes #44164

Kubernetes-commit: fc650a54d02f358c7fc65fa25b8312028bd4e944
2017-06-13 20:47:32 +00:00
Fabiano Franz e06c9d2f84 Add group alias names to discovery in registry
Kubernetes-commit: 058f9b4f32f085075f7c2cc6c2caabc80ef41815
2017-06-13 20:47:31 +00:00
mbohlool bfb371141a Remove unused servePath from GetOperationIDAndTags and GetDefinitionName
Kubernetes-commit: ef8ee84cd07dedf0a441d455f54b55a6468b4b3d
2017-06-13 20:47:31 +00:00
Clayton Coleman 90d1b25a67 Add an e2e test for server side get
Print a better error from the response. Performs validation to ensure it
does not regress in alpha state.

Kubernetes-commit: ce972ca47591cc24a3a24362478dc61ec8e91278
2017-06-13 20:47:31 +00:00
Cao Shufeng 42b5738617 fix invalid status code for hijacker
When using hijacker to take over the connection, the http status code
should be 101 not 200.

PS:
Use "kubectl exec" as an example to review this change.

Kubernetes-commit: 541935b13f87e55199840a73cd3f158e7f0d7b63
2017-06-13 20:47:31 +00:00
Dr. Stefan Schimanski e10c78ea7c apiserver: return BadRequest 400 for invalid query params
Kubernetes-commit: 4846c0d16700bb7cb3c3e02fa3919f2de36d4685
2017-06-13 20:47:31 +00:00
Clayton Coleman 5fa08b8c5e Allow initialization of resources
Add support for creating resources that are not immediately visible to
naive clients, but must first be initialized by one or more privileged
cluster agents. These controllers can mark the object as initialized,
allowing others to see them.

Permission to override initialization defaults or modify an initializing
object is limited per resource to a virtual subresource "RESOURCE/initialize"
via RBAC.

Initialization is currently alpha.

Kubernetes-commit: 331eea67d8000e5c4b37e2234a90903c15881c2f
2017-06-13 20:47:30 +00:00
Cao Shufeng 89caee803d update copyed doc for advanced audit
doc for WithAudit is copyed from WithLegacyAudit, it's out of date.
This change update doc for these two functions.

Kubernetes-commit: 82390af25083031e244107527fe5d9491ade937b
2017-06-13 20:47:30 +00:00
Tim St. Clair 91a3addb8d Instrument advanced auditing
Kubernetes-commit: b77c8198f002f9a9c7bdca11d28cac1710bbb185
2017-06-13 20:47:30 +00:00
mbohlool 749c4d2fef Make OpenAPI GVK and Action extensions all lower-case
Kubernetes-commit: a3cbfde4b18fdbddf9c94be80acd4f0468a492b7
2017-06-13 20:47:29 +00:00
Clayton Coleman afe291fde8 Refactor printers to support rendering as a Table
Return tables from the server.

Kubernetes-commit: 7ce63eb608cdf95df429d6138ccf8dbf8b47a740
2017-06-13 20:47:29 +00:00
Clayton Coleman e1228ec319 Expose a default Table and partial output via Accept headers
All generic registries expose metadata output, and refactor endpoints to
allow negotiation to handle those responses. Add support for
PartialObjectMetadata being returned for objects as well.

Kubernetes-commit: f203e42cb98ed4bac7ad8ebbed717d3bd42f55b6
2017-06-13 20:47:29 +00:00
Dr. Stefan Schimanski a177d01bf0 audit: uniform 2 or 3 events for short/long running requests
Kubernetes-commit: 548f7be8fa10b6cbedcf179af088536e76a6c0e3
2017-06-13 20:47:29 +00:00
Dr. Stefan Schimanski 636c532e31 audit: fill in stage
Kubernetes-commit: 1e94185f4425551f1c81ba7bbdbae110bc317abd
2017-06-13 20:47:29 +00:00
Tim St. Clair a54d901fa7 Fix audit level none
Kubernetes-commit: 93e1e54e290325d82e41d50f64057323879bdef2
2017-06-13 20:47:29 +00:00
Tim St. Clair 8ff532a4cb Implement audit policy logic
Kubernetes-commit: a5de309ee261aea15bb1cc12647b32640c2ac196
2017-06-13 20:47:28 +00:00
Clayton Coleman 2f49bbbf91 Subresources are not included in apiserver prometheus metrics
Subresources are very often completely different code paths and errors
generated on those code paths are important to distinguish.

Kubernetes-commit: ad431c454c1306fdcc2134a3626444984d350f46
2017-06-13 20:47:28 +00:00
Tim St. Clair dac438aa53 Update existing code for audit API changes
Kubernetes-commit: 4c54970d31f0e35f21247514fb946081e6ee0be5
2017-06-13 20:47:28 +00:00
Tim St. Clair 78e974150d Append X-Forwarded-For in proxy handler
Kubernetes-commit: 6875e953782076237a0c20facc05eeb5d49aa161
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski 94ea219615 Update bazel
Kubernetes-commit: 9fdc36a47ada0bc34ee53b68edd085d368ed9012
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski ec8d130fa7 audit: wire through non-nil context everywhere
Kubernetes-commit: ce942d19c378ecd335e7e158e30cdc184f9d6184
2017-06-13 20:47:28 +00:00
Dr. Stefan Schimanski f7d766d92d audit: add audit event to the context and fill in handlers
Kubernetes-commit: 0b5bcb021932355b3ff7c2b45fb579f4adad84bf
2017-06-13 20:47:28 +00:00