eedba684cf
Add CEL library lifecycle linter
...
Kubernetes-commit: 980fa6a2b9edae577d1b71a28834afe1ca7dfe82
2023-08-23 17:17:32 -04:00
f0fbaa3fab
Bump cel string lib to v2, add tests
...
Kubernetes-commit: 3fb14cf4e7a0230d57f579b86262d9df6997e5e3
2023-08-22 13:05:09 -04:00
c6c8291384
Update k8s code to handle cel-go changes
...
Kubernetes-commit: 640a2ec33274f4b6311afc7dbb0c7e15bd5d792a
2023-08-18 17:32:41 -04:00
6f6cacf8bf
check for overflow
...
Co-authored-by: Jordan Liggitt <jordan@liggitt.net>
Kubernetes-commit: b1223e0d1ac626d5472436ed2cd0bc2962394004
2023-08-22 10:02:10 -07:00
3e172f1316
Fix CEL cost handling of zero length replacement strings
...
Kubernetes-commit: 87cf890632c538e83e961035e73f0f2e8d3ceeba
2023-08-21 22:48:11 -04:00
539b445fa2
Add test coverage of result size of string operations
...
Kubernetes-commit: e4d16f34c15affdf4411d5bd1b19991b5fa27f2a
2023-08-07 12:41:52 -04:00
b137c25637
Add quantity library to CEL ( #118803 )
...
* add quantity library to CEL
* add more tests to quantity
* use 1.29 env for quantity
* set CEL default env to 1.28 for 1.28 release
* add compare function
* docs and arith lib
* fixup addInt and subInt overload, add docs
* more tests
* cleanup docs
* remove old comments
* remove unnecessary cast
* add isInteger
* add overflow tests
* boilerplate
* refactor expectedResult for tests
* doc typo fix
* returns bool
* add docs link
* different dos link
* add isInteger true case
* expand iff
* add quantity back to 1.28 version, and revert change to DefaultCompatibilityVersion
* formatting
Kubernetes-commit: 423f4dfc7982136c958fc78e187c911a8896ba1b
2023-07-13 14:43:56 -07:00
e04cbed587
CEL lib: Expose errors on authz decisions instead of raising them from check().
...
Co-authored-by: Ben Luddy <bluddy@redhat.com>
Kubernetes-commit: 1053d1bbcf581f20300a821a951a14ae77915246
2023-03-10 22:38:21 -05:00
f32e391a45
Introduce CEL EnvSets for managing safe rollout of new CEL features, libraries and expression variables
...
Kubernetes-commit: e740f8340eedc89baccd120329b454a860385e2d
2023-04-28 14:16:56 -04:00
c86f7c33d0
Clean up reference to deleted denied function
...
Kubernetes-commit: d109f60a0579bcc34244cbc74068be07d18443e6
2023-03-20 18:24:10 -07:00
f094db0dd5
Implement secondary authz
...
Kubernetes-commit: 7bbda746fee7ae4e50647099b72c02327525ef7a
2023-03-06 12:08:14 -05:00
1f02ef5b4e
getHost and getHostname have documentation swapped for IPv6
...
Kubernetes-commit: cb4637b378d464dc8622e637d0a72a29b756336f
2023-02-08 19:50:02 +01:00
870da5a58e
move CEL package to apiserver package.
...
only anything that does not require Structural
Kubernetes-commit: 0dd316a5c11261c0e5fc7928d8697754b16ad461
2022-10-07 15:02:47 -07:00
Joe Betz