kubernetes
/
apiserver
mirror of https://github.com/kubernetes/apiserver.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
apiserver/pkg/endpoints/filters
History
Margo Crawford 6c62752c02 This introduces an Impersonate-Uid header to server side code. 
UserInfo contains a uid field alongside groups, username and extra.
This change makes it possible to pass a UID through as an impersonation header like you
can with Impersonate-Group, Impersonate-User and Impersonate-Extra.

This PR contains:

* Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
* Unit tests for allowed and disallowed impersonation cases
* An integration test that creates a CertificateSigningRequest using impersonation,
  and ensures that the API server populates the correct impersonated spec.uid upon creation.

Kubernetes-commit: 74f5ed6b17287100b339a2b3a43fd4c6fb200978
 		2021-03-04 15:19:52 -08:00
..
OWNERS Updated OWNERS files to include link to docs 2019-01-30 20:05:00 +01:00
audit.go Fix staticcheck in cluster & k8s.io/{apimachinery,apiserver} 2021-06-05 22:15:15 +02:00
audit_annotations.go Allow handlers early in the request chain to set audit annotations 2020-03-19 20:02:37 -04:00
audit_test.go apiserver: manage audit ID associated with a request 2021-03-02 19:22:39 -05:00
authentication.go Fix incorret authentication metrics 2021-03-08 13:34:55 +00:00
authentication_test.go Fix incorret authentication metrics 2021-03-08 13:34:55 +00:00
authn_audit.go add context to metric in apiserver/audit 2021-01-20 12:04:41 -08:00
authn_audit_test.go Update usages of http.ResponseWriter.WriteHeader to use http.Error 2018-10-08 22:20:52 +03:00
authorization.go staging\src\k8s.io\apiserver\pkg\endpoints:migrate to structured logs 2021-01-15 15:23:55 +08:00
authorization_test.go Propagate context to Authorize() calls 2019-09-24 10:06:32 -04:00
cachecontrol.go add cache-control headers to kube-apiserver 2019-08-26 09:39:29 -04:00
cachecontrol_test.go add cache-control headers to kube-apiserver 2019-08-26 09:39:29 -04:00
doc.go Mechanical fixup imports: pkg/genericapiserver 2017-02-13 07:36:41 -05:00
impersonation.go This introduces an Impersonate-Uid header to server side code. 2021-03-04 15:19:52 -08:00
impersonation_test.go This introduces an Impersonate-Uid header to server side code. 2021-03-04 15:19:52 -08:00
metrics.go fix broken link in some files 2021-04-13 08:43:24 +08:00
metrics_test.go Factor-out metrics related logic from authentication logic. 2020-01-28 15:53:25 -08:00
request_deadline.go fix staticcheck for k8s.io/apiserver/pkg/endpoints 2021-02-27 15:37:00 +08:00
request_deadline_test.go apiserver: plumb context with request deadline 2020-11-26 23:53:20 -05:00
request_received_time.go Take into account latency incurred in server filters 2020-09-18 16:46:07 -04:00
request_received_time_test.go Take into account latency incurred in server filters 2020-09-18 16:46:07 -04:00
requestinfo.go Remove request context mapper 2018-04-18 11:12:15 -04:00
requestinfo_test.go Mechanical move: pkg/genericapiserver -> k8s.io/apiserver 2017-02-13 07:36:41 -05:00
storageversion.go fixup! unblock resources that the storage version manager depends on 2020-11-12 16:37:17 -08:00
traces.go Add distributed tracing to the apiserver using OpenTelemetry 2021-06-25 05:20:16 -07:00
warning.go Add warnings capability for admission webhooks 2020-06-30 16:27:56 -04:00
warning_test.go Add warnings capability for admission webhooks 2020-06-30 16:27:56 -04:00
with_auditid.go apiserver: manage audit ID associated with a request 2021-03-02 19:22:39 -05:00
with_auditid_test.go apiserver: manage audit ID associated with a request 2021-03-02 19:22:39 -05:00