Commit Graph

2058 Commits

Author SHA1 Message Date
Jordan Liggitt e206313b1e audit subproject owners/reviewers
Kubernetes-commit: 4fe30e92fa655b08f819bc449ca6002a7ccd3eea
2018-11-02 12:46:56 -04:00
Kubernetes Publisher 89d4c53a3b Merge pull request #70671 from deads2k/delegated-system-master
allow delegated authorization to have privileged groups

Kubernetes-commit: 08deddfdbca9304dbe23414e3d7cd0f4a986ce45
2018-11-06 17:14:13 +00:00
Kubernetes Publisher ded8fc7a9c Merge pull request #70556 from pbarker/audit-test-fix
updates audit endpoints test

Kubernetes-commit: e6b3d31bcf0e8ac50e9f03e324de90c2cce48337
2018-11-06 05:13:38 +00:00
Kubernetes Publisher be4a516a12 Merge pull request #70449 from mikedanese/simplcache
remove webhook cache implementation and replace with token cache

Kubernetes-commit: c8604653f02c4dd6458274776088ebb4abf5b9a1
2018-11-06 01:08:32 +00:00
Kubernetes Publisher cabd57eab1 Merge pull request #70476 from charrywanganthony/backendGroupVersionV1
Use `audit.k8s.io/v1` as default value of option --audit-webhook-vers…

Kubernetes-commit: 714711e52dfe4667af921a90e4bd02c07f3ab588
2018-11-06 01:07:39 +00:00
David Eads 83c8e657ed allow delegated authorization to have privileged groups
Kubernetes-commit: 0b70b7a7c975589f7019e5017c334cf0ee6b819f
2018-11-05 16:23:20 -05:00
Kubernetes Publisher b4fba3b8a3 Merge pull request #70593 from bbbmj/typo
chore(apiserver): nit fix

Kubernetes-commit: 2bbfd500a833fff9e727561e05283b0babb5317b
2018-11-03 08:25:35 +00:00
Kubernetes Publisher 419e8112fc Merge pull request #70553 from pbarker/webhook-refactor
refactors kubeapiserver webhook utility to be generic

Kubernetes-commit: d7f90253e9cabb422c4f4bbd820862a00e1a69d0
2018-11-03 04:25:52 +00:00
包梦江 368bcce487 chore(apiserver): nit fix
Kubernetes-commit: c5e51dc2e44818aacaad9b99b14fae088c5f0ad1
2018-11-03 02:32:04 +08:00
Kubernetes Publisher 5009f7fe49 Merge pull request #69976 from atlassian/update-few-dependencies
Update a few dependencies

Kubernetes-commit: a831ea20a4a6a7e43d7f264657f6af57a4150574
2018-11-02 09:17:08 +00:00
Patrick Barker 3480440d4b refactors kubeapiserver webhook utility to be generic generated
Kubernetes-commit: d33f347ba8759d786d115cc60762f3e7e3f861d1
2018-11-01 22:20:39 +00:00
Patrick Barker ee71388a42 updates audit endpoints test
Kubernetes-commit: 5a84453e4eaab610e2af5346b948091a409327e2
2018-11-01 15:56:50 -06:00
Kubernetes Publisher d7fa5b393b Merge pull request #69916 from mikedanese/trev9
create audience unaware authenticator wrappers

Kubernetes-commit: 1165d661f03724a933794584f48b577cefaa7654
2018-11-01 21:27:29 +00:00
Patrick Barker 8c2cdbce6d refactors kubeapiserver webhook utility to be generic
Kubernetes-commit: 1081fffdd5f6f523a5de0fd30e85b7208220dcb9
2018-11-01 15:22:58 -06:00
Kubernetes Publisher f2e7e4864e Merge pull request #70260 from lavalamp/schema-fix
bump kube-openapi dep

Kubernetes-commit: 6f897af2daffd8cd3539f1ef279b9f9bc280d98f
2018-11-01 09:23:03 +00:00
Kubernetes Publisher 46ea977b30 Merge pull request #67795 from mbohlool/crd_conversion_api_changes
CRD Conversion API Changes

Kubernetes-commit: 11706d3803150bcedc51bf5b00ed443d90384571
2018-11-01 09:22:12 +00:00
Kubernetes Publisher fb7c01f587 Merge pull request #69551 from fqsghostcloud/master
fix typo

Kubernetes-commit: 66f68f3ccf391b4377b71787827295e8396de45d
2018-11-01 05:19:10 +00:00
Kubernetes Publisher 6bbe65a989 Merge pull request #70453 from liggitt/api-owners
Update API-related owners files

Kubernetes-commit: c81a4a09cf07083265591a9f48c53e80c13d3ebd
2018-11-01 01:16:03 +00:00
Daniel Smith 8d64bed783 update generated deps
Kubernetes-commit: dcb10d81d18f4e8a58496ef61b62247ae93bbaef
2018-10-31 17:11:23 -07:00
Mehdy Bohlool d7da690844 Update generated files
Kubernetes-commit: e27096cdb468ace668f4f333e9acb46daf33df3f
2018-10-31 10:18:07 -07:00
Chao Wang f8fa426bd3 Use `audit.k8s.io/v1` as default value of option --audit-webhook-version and --audit-log-version in release 1.13
Kubernetes-commit: 9671a035f7e7308ac804b4637af19bac2ecce0f4
2018-10-31 17:22:37 +08:00
Kubernetes Publisher 768725318f Merge pull request #70168 from wgliang/update-vendor/coreos-etcd
Update vendor package github.com/coreos/...

Kubernetes-commit: 9e31e6567f03cf5cf0b6ff44222409c510393e93
2018-10-31 05:17:14 +00:00
Kubernetes Publisher 62e94fcc19 Merge pull request #70032 from iamneha/delete_namespaced_job_spec
Fix(bug): make body an optional parameter in [DELETE] /apis/batch/v1/…

Kubernetes-commit: 93d1567c6f5037a3844125d2a5f61b2d1a0e6927
2018-10-30 21:31:37 +00:00
Kubernetes Publisher bcc4ccc10c Merge pull request #69884 from liggitt/self-sign-in-memory
Allow components to generate certificates in-memory

Kubernetes-commit: d196d63c01719b78c96571775fc8c0c2b6eb30a0
2018-10-30 21:30:48 +00:00
Jordan Liggitt 670c0a7eb7 Update API-related owners files
Kubernetes-commit: 8c20bdaf4661f8764c7a7f2e42674aa6a9bf5d70
2018-10-30 17:05:08 -04:00
Mike Danese 0bf5dcd764 remove webhook cache implementation and replace with the token cache
The striped cache used by the token cache is slightly more sophisticated
however the simple cache provides about the same exact behavior. I used
the striped cache rather than the simple cache because:

* It has been used without issue as the primary token cache.
* It preforms better under load.
* It is already exposed in the public API of the token cache package.

Kubernetes-commit: 0ec4d6d396f237ccb3ae0e96922a90600befb83d
2018-10-30 12:41:46 -07:00
Mehdy Bohlool 154485c3be Refactor webhookclientConfig validation of admission and audit registration
Kubernetes-commit: 1587d189cbf27b3c2470cf1fe56e50afbde412b6
2018-10-30 11:57:29 -07:00
Kubernetes Publisher ee4fe25ec2 Merge pull request #70314 from samdamana/auth-revert
Revert "limit forbidden error to details of what was forbidden"

Kubernetes-commit: 361f8c31bd1851a37953e8001d31c20b91a5a24a
2018-10-30 01:28:59 +00:00
Kubernetes Publisher 6b272fc5ca Merge pull request #70310 from mikedanese/trev10
echo audiences in anonymous and insecure authenticators

Kubernetes-commit: 952e7b07c6bbcd27474adde57d4df6a1b15f1db2
2018-10-30 01:27:41 +00:00
Kubernetes Publisher 7ba8fae5dc Merge pull request #69756 from cheftako/trace
Added tracing for long running requests.

Kubernetes-commit: 833dcc2be383cd11933fd0abf74574eb213df59e
2018-10-29 09:35:45 +00:00
Samuel Davidson d8ee4bc0cb Revert "limit forbidden error to details of what was forbidden"
This reverts commit ecbd0137957b4afd4cdd94c0209998228fd70e99.

Kubernetes-commit: 294e02ed4b341fe9497cdfadb93cf19f1e64243f
2018-10-26 15:58:09 -07:00
Mike Danese 7c1e7ec029 echo audiences in anonymous and insecure authenticators
part of https://github.com/kubernetes/kubernetes/issues/69893

Kubernetes-commit: f94bc6193e1e299b1cb258b59504fab81cf8da1c
2018-10-26 15:29:55 -07:00
Neha Yadav 3e6dd50d69 fix(bug): make body a optional parameter in [DELETE] /apis/batch/v1/namespaces/{namespace}/jobs/{name}
Kubernetes-commit: 31372f16129b3f6fa50e85e175643b3a43ba3da2
2018-10-27 00:40:10 +05:30
Kubernetes Publisher e3d7726491 Merge pull request #69389 from smarterclayton/wait_error
kubectl wait must handle errors returned by watch

Kubernetes-commit: b6fd5d93b2048ae19cbcf21bafdd5cd7249d1f33
2018-10-26 15:07:21 +00:00
Kubernetes Publisher 1a3bbcfc1f Merge pull request #70237 from nikhita/proto-remove-trailing-whitespace
Remove trailing whitespace in the protobuf generator

Kubernetes-commit: f4bf0e8d33328183b36e861731f0b01d46ae5833
2018-10-25 08:25:06 -07:00
Kubernetes Publisher 721817c2cf Merge pull request #70087 from liggitt/fix-crd-internal-types
Fix custom resource handler in-memory version

Kubernetes-commit: ed39bd45f531d17d26869aae29f069173cb0ce55
2018-10-26 15:06:18 +00:00
Kubernetes Publisher 62c5b3b954 Merge pull request #69013 from ibrasho-forks/switch-to-http.Error
Update usages of http.ResponseWriter.WriteHeader to use http.Error

Kubernetes-commit: dad07683b101dfa71444d0c580579035fe5cd5a0
2018-10-26 15:06:17 +00:00
Kubernetes Publisher af5573895c Merge pull request #69730 from xichengliudui/fix18101204
Fix some typo

Kubernetes-commit: e77e8ffbf5c466f232f970ae529d745ae27e0ff7
2018-10-26 15:06:17 +00:00
Kubernetes Publisher 64b085417d Merge pull request #69582 from mikedanese/trev7
tokenreview: authenticator interface changes

Kubernetes-commit: baa8d800adce511c5af38dc6a711bd73e38d8046
2018-10-26 15:06:16 +00:00
Kubernetes Publisher 7aa37fef51 Merge pull request #70060 from pbarker/audit-webhook
updates shared apiserver webhook client

Kubernetes-commit: 9fb4a2aa9a553282f8b41ec6ca9d3f8511c660fa
2018-10-26 15:06:15 +00:00
Kubernetes Publisher 99a76d773c Merge pull request #69866 from xichengliudui/fix181016
Remove duplicate words

Kubernetes-commit: 1af393d58ef982056e479ae0a5b33f810d46a375
2018-10-26 15:06:15 +00:00
Kubernetes Publisher decf83a196 Merge pull request #69895 from jpbetz/webhook-metrics-cardinality-fix
Reduce cardinality of admission webhook metrics

Kubernetes-commit: 04d394904846a298af1d37e7a9c15c00f574b09a
2018-10-26 15:06:14 +00:00
Nikhita Raghunath a14ca1235c generated proto: remove trailing whitespace
Kubernetes-commit: e60b0a129a16fbc785c73dd4839acaabf856851c
2018-10-25 16:37:33 +05:30
Guoliang Wang 8e309ce8e0 Update vendor package github.com/coreos/...
Kubernetes-commit: d462e1e8d7e45894bf2abb7dc5d939f1bd3cae68
2018-10-24 05:43:42 +00:00
Jordan Liggitt dba666528b Allow specifying the hub group-version for a handler
Kubernetes-commit: 0e9b06df0f21b421ff69fd455d4542883d61e8c3
2018-10-22 10:14:52 -04:00
Jordan Liggitt b758170bd7 Inline patch#toUnversioned
Kubernetes-commit: 870d121d5e8033a72c62ef3a64939f0eacab6798
2018-10-22 10:01:27 -04:00
Patrick Barker 53adc37659 updates shared apiserver webhook client
Kubernetes-commit: 5874a1f8faab92aacc5503aa6dbf1c6a724f832f
2018-10-21 10:03:28 -05:00
Mikhail Mazurskiy 3ee5383cc2 Update a few dependencies
github.com/go-openapi/*
github.com/asaskevich/govalidator

Kubernetes-commit: 8763223ab947fa8bae7b3459f70b7094bdc25e1a
2018-10-18 23:33:10 +11:00
Kubernetes Publisher 7f6c545c2e Merge pull request #67547 from pbarker/audit-api
dynamic audit configuration api

Kubernetes-commit: 0652e098d03197aa4cc0a53440f62e425bf992c5
2018-10-18 01:45:35 +00:00
Kubernetes Publisher cfcdd79ca6 Merge pull request #69838 from mikedanese/testonly
make tokentest available to tests only

Kubernetes-commit: 688550b2d34b20474f98c0c967bd846042141182
2018-10-17 17:45:26 +00:00