1fa829c7c8
Audit policy v1beta1 now supports matching subresources and resource names.
...
policy:
- level: Metadata
resources:
- group: ""
resources ["pods/logs"]
- level: None
resources:
- group: ""
resources: ["configmaps"]
resourceNames: ["controller-leader"]
The top level resource no longer matches the subresource. For example "pods"
no longer matches requests to the logs subresource on pods.
```release-note
Audit policy supports matching subresources and resource names, but the top level resource no longer matches the subresouce. For example "pods" no longer matches requests to the logs subresource of pods. Use "pods/logs" to match subresources.
```
Kubernetes-commit: 85491f1578b9b97751a332d3b957d874cecf27b3
2017-09-01 16:38:01 +00:00
064c57bb9b
Generated files
...
Kubernetes-commit: c7defb806fc6c69deb4ab57655c3fa323ba8bebd
2017-08-29 13:18:49 +00:00
d7bd79fee1
[advanced audit api] fuzz Event with random value
...
This is an error import by me:
https://github.com/kubernetes/kubernetes/pull/49115
We need to fuzz other parts of Event with random value, otherwise
this round trip test will not make too much sense.
@sttts @ericchiang
Kubernetes-commit: f2ec610455f3756afebfcbd99c108abc86a5015d
2017-08-29 13:17:13 +00:00
24b54db39e
run hack/update-all.sh
...
Kubernetes-commit: 0410221c3fec1a54cde05104b92e44e13cddc77a
2017-08-29 13:16:13 +00:00
3468d049a7
upgrade advanced audit to v1beta1
...
Kubernetes-commit: f4e8b8f1464e588306d5c1c4ffdc1a6cb1e9313b
2017-08-29 13:16:13 +00:00
2c8f1ce1d5
apimachinery: remove pre-apigroups import prefix logic
...
Kubernetes-commit: 8728576236698083f619c4fab06943b174f3fc61
2017-08-29 13:16:10 +00:00
6c539a43c6
Use buildozer to delete licenses() rules except under third_party/
...
Kubernetes-commit: a7f49c906df816123e7d4ccbd4cebab411519465
2017-08-29 13:15:24 +00:00
6caa2933ae
Use buildozer to remove deprecated automanaged tags
...
Kubernetes-commit: 33276f06be5e872bf53ca62a095fcf0a6b6c11a8
2017-08-29 13:15:24 +00:00
f8c99c82f6
Autogenerate BUILD files
...
Kubernetes-commit: cf55f9ed45e6df2431d47cfc5b9c9b30758527f1
2017-08-29 13:15:23 +00:00
4ace90bfb4
Return Audit-Id http header for trouble shooting
...
Kubernetes-commit: 4a1e7ddaa6e0d2e92ce27d9846cfc8407e1fcb60
2017-08-29 13:14:38 +00:00
44942b068a
Run hack/update-bazel.sh to generate BUILD files
...
Kubernetes-commit: 3579017b865ddbc5449d6bba87346f086e4b93ff
2017-08-29 13:13:51 +00:00
4f763bd819
Add missing ugorji codecs for auth/v1, settings/v1alphav1 and storage/v1
...
Kubernetes-commit: 51df7cf59de2a7fbaad61e4a1a13598668028de5
2017-08-29 13:13:07 +00:00
2faadf8c85
update generated deepcopy code
...
Kubernetes-commit: a1c880ece3574a2c7170e0d040489d56dd912e08
2017-08-29 13:13:04 +00:00
e24df9a2e5
Update generated code
...
Kubernetes-commit: 8dd0989b395b29b872e1f5e06934721863e4a210
2017-07-19 03:49:08 +00:00
36b2f4560f
deepcopy: add interface deepcopy funcs
...
- add DeepCopyObject() to runtime.Object interface
- add DeepCopyObject() via deepcopy-gen
- add DeepCopyObject() manually
- add DeepCopySelector() to selector interfaces
- add custom DeepCopy func for TableRow.Cells
Kubernetes-commit: 39d95b9b065fffebe5b6f233d978fe1723722085
2017-07-19 03:49:08 +00:00
8304eb8a20
audit: fix deepcopy registration
...
Kubernetes-commit: ad23081273785668ee2520e5349cf0b05f64e41f
2017-07-16 04:08:41 +00:00
af4570c690
update events' ResponseStatus at Metadata level
...
ResponseStatus is populated in MetadataLevel, so we also update it in
MetadataLevel.
Kubernetes-commit: b6abcacb38d5da7c70ea9f3e6f673c8beeb90092
2017-07-04 08:39:44 +00:00
0ce81fed2f
add validate for advanced audit policy
...
This change checks group name and non-resrouce URLs format for audit
policy.
Kubernetes-commit: 7437b88386665ff4a16fe37d02818285636ec8ce
2017-07-04 08:39:44 +00:00
8be42ee0d0
run hack/update-all
...
Kubernetes-commit: 60604f8818aecbc9c3736fbc32747cc0a535bc80
2017-06-28 00:14:31 +00:00
e5d0493897
make all works. generated harmless covnersion/deepcoy chagnes
...
Kubernetes-commit: 847b048fa0b2e83d4d4c39ceb37e9e0262d5a968
2017-06-28 00:14:31 +00:00
81b7aaaa7d
run root-rewrite-import-client-go-api-types
...
Kubernetes-commit: f2d3220a11111f86b2f481e70e3c1ca4f5896f44
2017-06-28 00:14:31 +00:00
150b64eff5
run hack/update-codegen.sh
...
Kubernetes-commit: e185f7e2770039a799a21af9362ed999197dcc33
2017-06-28 00:14:31 +00:00
5f00d0e8e2
generated: protobuf with stable map ordering
...
Kubernetes-commit: 606825eea47f41c72a3da1d4d2a769a340e1b69d
2017-06-20 00:06:38 +00:00
fe3c2f4191
Generate protobuf for the audit API
...
Kubernetes-commit: d7d54357205e62a2912ded53f2b307205bfccf2b
2017-06-13 20:47:31 +00:00
3f8656c5e3
generated defaults files
...
generated bazel
Kubernetes-commit: 902c501595dfd044b3e7062e1518f7f3025751a5
2017-06-13 20:47:30 +00:00
f695ec4d4b
audit-types: add Panic stage
...
Kubernetes-commit: 3e9c8aaac689d9b0a11849b09aced266b48b3af8
2017-06-13 20:47:29 +00:00
8ff532a4cb
Implement audit policy logic
...
Kubernetes-commit: a5de309ee261aea15bb1cc12647b32640c2ac196
2017-06-13 20:47:28 +00:00
7618d3f6da
Fix doc about Verb for advanced audit feature
...
Kubernetes-commit: 312d117f51972fdaaf691100452942c61e163224
2017-06-13 20:47:28 +00:00
4fa7bd1587
Generated code
...
Kubernetes-commit: 7bc9b3004956e84dd29ab66a7fb24e9924d960b7
2017-06-13 20:47:28 +00:00
2c15f760d9
Update audit API with missing pieces
...
Kubernetes-commit: 4c98cab4dbccdc6ba005c08bf45c48aeb8e142b9
2017-06-13 20:47:28 +00:00
94ea219615
Update bazel
...
Kubernetes-commit: 9fdc36a47ada0bc34ee53b68edd085d368ed9012
2017-06-13 20:47:28 +00:00
f7d766d92d
audit: add audit event to the context and fill in handlers
...
Kubernetes-commit: 0b5bcb021932355b3ff7c2b45fb579f4adad84bf
2017-06-13 20:47:28 +00:00
b2138bb657
Update generated files
...
Kubernetes-commit: 6565f68cfab218c1c143edc8028f2bc2183b4150
2017-05-19 17:28:21 +00:00
d9744c1278
Add internal audit API types
...
Kubernetes-commit: cdacc1f6dfe85b99a0e8da7b1081eadeee1258ff
2017-05-19 17:28:21 +00:00
549abf6787
Fix docs for advanced audit
...
Kubernetes-commit: 22ba5eb0756d4eb936db3d911be7a79fffbb142e
2017-05-17 17:27:53 +00:00
ccd060c4df
hack/update-bazel.sh
...
Kubernetes-commit: 951aa18225ed27d3f6b181c9403e4c4755c30ae1
2017-05-16 17:27:51 +00:00
801bfb00d4
Internal audit API
...
Kubernetes-commit: ce2d57802f984678bc6ea0143c63602e0a4fb54e
2017-05-16 17:27:51 +00:00
Eric Chiang
Jordan Liggitt
Cao Shufeng
Dr. Stefan Schimanski
Jeff Grafton
supereagle
Chao Xu
Clayton Coleman
Tim St. Clair