ee6702dcda
update staging godeps for golang.org/x/net/... to release-branch.go1.10
...
Kubernetes-commit: adf155ee9f9dfa023069282ec195f9eb8d1ce0fe
2018-11-06 15:49:50 -08:00
89d4c53a3b
Merge pull request #70671 from deads2k/delegated-system-master
...
allow delegated authorization to have privileged groups
Kubernetes-commit: 08deddfdbca9304dbe23414e3d7cd0f4a986ce45
2018-11-06 17:14:13 +00:00
257a06e88a
add With method for allowed URL options on delegated authorization
...
Kubernetes-commit: 77b56ec9e36dd721c341ce838d608e8af10ce51f
2018-11-06 10:44:29 -05:00
ded8fc7a9c
Merge pull request #70556 from pbarker/audit-test-fix
...
updates audit endpoints test
Kubernetes-commit: e6b3d31bcf0e8ac50e9f03e324de90c2cce48337
2018-11-06 05:13:38 +00:00
be4a516a12
Merge pull request #70449 from mikedanese/simplcache
...
remove webhook cache implementation and replace with token cache
Kubernetes-commit: c8604653f02c4dd6458274776088ebb4abf5b9a1
2018-11-06 01:08:32 +00:00
cabd57eab1
Merge pull request #70476 from charrywanganthony/backendGroupVersionV1
...
Use `audit.k8s.io/v1` as default value of option --audit-webhook-vers…
Kubernetes-commit: 714711e52dfe4667af921a90e4bd02c07f3ab588
2018-11-06 01:07:39 +00:00
83c8e657ed
allow delegated authorization to have privileged groups
...
Kubernetes-commit: 0b70b7a7c975589f7019e5017c334cf0ee6b819f
2018-11-05 16:23:20 -05:00
b4fba3b8a3
Merge pull request #70593 from bbbmj/typo
...
chore(apiserver): nit fix
Kubernetes-commit: 2bbfd500a833fff9e727561e05283b0babb5317b
2018-11-03 08:25:35 +00:00
419e8112fc
Merge pull request #70553 from pbarker/webhook-refactor
...
refactors kubeapiserver webhook utility to be generic
Kubernetes-commit: d7f90253e9cabb422c4f4bbd820862a00e1a69d0
2018-11-03 04:25:52 +00:00
136e478e9f
encryption-at-rest approvers/reviewers
...
Kubernetes-commit: 666c93a8343029a499ea64de8a6d09596097ccb3
2018-11-02 17:38:17 -04:00
032ec9d79b
Switch to sigs.k8s.io/yaml from ghodss/yaml
...
Change-Id: Ic72b5131bf441d159012d67a6a3d87088d0e6d31
Kubernetes-commit: 43f523d405b012fa8d90dd95b667f520e036f6bc
2018-11-02 16:41:57 -04:00
368bcce487
chore(apiserver): nit fix
...
Kubernetes-commit: c5e51dc2e44818aacaad9b99b14fae088c5f0ad1
2018-11-03 02:32:04 +08:00
b5314974ae
certificates subproject approvers/reviewers
...
Kubernetes-commit: 4ebe084376610b88b0ac446b59ef537adcee51e3
2018-11-02 14:11:01 -04:00
c710b80254
authorizers subproject approvers/reviewers
...
Kubernetes-commit: 9ae79f965395047ed46de110b2b45f0a91083f43
2018-11-02 13:53:57 -04:00
6320ce44cc
authenticators subproject approvers/reviewers
...
Kubernetes-commit: 4fa2a0cc8a86a5d322e52c43eb7d5ffe36b7887f
2018-11-02 13:36:47 -04:00
e206313b1e
audit subproject owners/reviewers
...
Kubernetes-commit: 4fe30e92fa655b08f819bc449ca6002a7ccd3eea
2018-11-02 12:46:56 -04:00
5009f7fe49
Merge pull request #69976 from atlassian/update-few-dependencies
...
Update a few dependencies
Kubernetes-commit: a831ea20a4a6a7e43d7f264657f6af57a4150574
2018-11-02 09:17:08 +00:00
cf34e93a65
adds dynamic audit configuration generated
...
Kubernetes-commit: 5cb70e369f0835c71d672a38bf69d2085f3f3add
2018-11-02 02:52:49 +00:00
3480440d4b
refactors kubeapiserver webhook utility to be generic generated
...
Kubernetes-commit: d33f347ba8759d786d115cc60762f3e7e3f861d1
2018-11-01 22:20:39 +00:00
ee71388a42
updates audit endpoints test
...
Kubernetes-commit: 5a84453e4eaab610e2af5346b948091a409327e2
2018-11-01 15:56:50 -06:00
d7fa5b393b
Merge pull request #69916 from mikedanese/trev9
...
create audience unaware authenticator wrappers
Kubernetes-commit: 1165d661f03724a933794584f48b577cefaa7654
2018-11-01 21:27:29 +00:00
8c2cdbce6d
refactors kubeapiserver webhook utility to be generic
...
Kubernetes-commit: 1081fffdd5f6f523a5de0fd30e85b7208220dcb9
2018-11-01 15:22:58 -06:00
f2e7e4864e
Merge pull request #70260 from lavalamp/schema-fix
...
bump kube-openapi dep
Kubernetes-commit: 6f897af2daffd8cd3539f1ef279b9f9bc280d98f
2018-11-01 09:23:03 +00:00
46ea977b30
Merge pull request #67795 from mbohlool/crd_conversion_api_changes
...
CRD Conversion API Changes
Kubernetes-commit: 11706d3803150bcedc51bf5b00ed443d90384571
2018-11-01 09:22:12 +00:00
fb7c01f587
Merge pull request #69551 from fqsghostcloud/master
...
fix typo
Kubernetes-commit: 66f68f3ccf391b4377b71787827295e8396de45d
2018-11-01 05:19:10 +00:00
6bbe65a989
Merge pull request #70453 from liggitt/api-owners
...
Update API-related owners files
Kubernetes-commit: c81a4a09cf07083265591a9f48c53e80c13d3ebd
2018-11-01 01:16:03 +00:00
8d64bed783
update generated deps
...
Kubernetes-commit: dcb10d81d18f4e8a58496ef61b62247ae93bbaef
2018-10-31 17:11:23 -07:00
d7da690844
Update generated files
...
Kubernetes-commit: e27096cdb468ace668f4f333e9acb46daf33df3f
2018-10-31 10:18:07 -07:00
f8fa426bd3
Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13
...
Kubernetes-commit: 9671a035f7e7308ac804b4637af19bac2ecce0f4
2018-10-31 17:22:37 +08:00
768725318f
Merge pull request #70168 from wgliang/update-vendor/coreos-etcd
...
Update vendor package github.com/coreos/...
Kubernetes-commit: 9e31e6567f03cf5cf0b6ff44222409c510393e93
2018-10-31 05:17:14 +00:00
62e94fcc19
Merge pull request #70032 from iamneha/delete_namespaced_job_spec
...
Fix(bug): make body an optional parameter in [DELETE] /apis/batch/v1/…
Kubernetes-commit: 93d1567c6f5037a3844125d2a5f61b2d1a0e6927
2018-10-30 21:31:37 +00:00
bcc4ccc10c
Merge pull request #69884 from liggitt/self-sign-in-memory
...
Allow components to generate certificates in-memory
Kubernetes-commit: d196d63c01719b78c96571775fc8c0c2b6eb30a0
2018-10-30 21:30:48 +00:00
670c0a7eb7
Update API-related owners files
...
Kubernetes-commit: 8c20bdaf4661f8764c7a7f2e42674aa6a9bf5d70
2018-10-30 17:05:08 -04:00
0bf5dcd764
remove webhook cache implementation and replace with the token cache
...
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:
* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.
Kubernetes-commit: 0ec4d6d396f237ccb3ae0e96922a90600befb83d
2018-10-30 12:41:46 -07:00
154485c3be
Refactor webhookclientConfig validation of admission and audit registration
...
Kubernetes-commit: 1587d189cbf27b3c2470cf1fe56e50afbde412b6
2018-10-30 11:57:29 -07:00
ae00afc213
patch webhook authenticator to support token review with arbitrary audiences
...
Kubernetes-commit: effad15ecc373beb46afd2915827247da51f399d
2018-10-29 20:45:10 -07:00
ee4fe25ec2
Merge pull request #70314 from samdamana/auth-revert
...
Revert "limit forbidden error to details of what was forbidden"
Kubernetes-commit: 361f8c31bd1851a37953e8001d31c20b91a5a24a
2018-10-30 01:28:59 +00:00
6b272fc5ca
Merge pull request #70310 from mikedanese/trev10
...
echo audiences in anonymous and insecure authenticators
Kubernetes-commit: 952e7b07c6bbcd27474adde57d4df6a1b15f1db2
2018-10-30 01:27:41 +00:00
7ba8fae5dc
Merge pull request #69756 from cheftako/trace
...
Added tracing for long running requests.
Kubernetes-commit: 833dcc2be383cd11933fd0abf74574eb213df59e
2018-10-29 09:35:45 +00:00
81c2dfc933
make oidc authenticator (more?) audience aware
...
Part of https://github.com/kubernetes/kubernetes/issues/69893
Kubernetes-commit: a714d9cd044aab9c6f2d11c5bac0c6e60d3ba0b4
2018-10-26 17:46:32 -07:00
d8ee4bc0cb
Revert "limit forbidden error to details of what was forbidden"
...
This reverts commit ecbd0137957b4afd4cdd94c0209998228fd70e99.
Kubernetes-commit: 294e02ed4b341fe9497cdfadb93cf19f1e64243f
2018-10-26 15:58:09 -07:00
7c1e7ec029
echo audiences in anonymous and insecure authenticators
...
part of https://github.com/kubernetes/kubernetes/issues/69893
Kubernetes-commit: f94bc6193e1e299b1cb258b59504fab81cf8da1c
2018-10-26 15:29:55 -07:00
3e6dd50d69
fix(bug): make body a optional parameter in [DELETE] /apis/batch/v1/namespaces/{namespace}/jobs/{name}
...
Kubernetes-commit: 31372f16129b3f6fa50e85e175643b3a43ba3da2
2018-10-27 00:40:10 +05:30
e3d7726491
Merge pull request #69389 from smarterclayton/wait_error
...
kubectl wait must handle errors returned by watch
Kubernetes-commit: b6fd5d93b2048ae19cbcf21bafdd5cd7249d1f33
2018-10-26 15:07:21 +00:00
1a3bbcfc1f
Merge pull request #70237 from nikhita/proto-remove-trailing-whitespace
...
Remove trailing whitespace in the protobuf generator
Kubernetes-commit: f4bf0e8d33328183b36e861731f0b01d46ae5833
2018-10-25 08:25:06 -07:00
721817c2cf
Merge pull request #70087 from liggitt/fix-crd-internal-types
...
Fix custom resource handler in-memory version
Kubernetes-commit: ed39bd45f531d17d26869aae29f069173cb0ce55
2018-10-26 15:06:18 +00:00
62c5b3b954
Merge pull request #69013 from ibrasho-forks/switch-to-http.Error
...
Update usages of http.ResponseWriter.WriteHeader to use http.Error
Kubernetes-commit: dad07683b101dfa71444d0c580579035fe5cd5a0
2018-10-26 15:06:17 +00:00
af5573895c
Merge pull request #69730 from xichengliudui/fix18101204
...
Fix some typo
Kubernetes-commit: e77e8ffbf5c466f232f970ae529d745ae27e0ff7
2018-10-26 15:06:17 +00:00
64b085417d
Merge pull request #69582 from mikedanese/trev7
...
tokenreview: authenticator interface changes
Kubernetes-commit: baa8d800adce511c5af38dc6a711bd73e38d8046
2018-10-26 15:06:16 +00:00
7aa37fef51
Merge pull request #70060 from pbarker/audit-webhook
...
updates shared apiserver webhook client
Kubernetes-commit: 9fb4a2aa9a553282f8b41ec6ca9d3f8511c660fa
2018-10-26 15:06:15 +00:00
Wenjia Zhang