Commit Graph

15 Commits

Author SHA1 Message Date
Qiming Teng 60bf42a527 Update test cases for v1.28
This PR makes sure the manifests under `content/en/examples`
are valid in v1.28. The primary fixes are:

- Updated the go.mod/go.sum file for testing against v1.28.0 release.
- Revise test case code to ensure newly added manifests are tested;
- Adapt Pod validation options to upstream validation code change;
- Move a ValidatingWebhookConfiguration YAML back to inline because
  the manifest cannot validate against the validator. The CA bundle
  referenced is not a valid string (base64 encoded). That means the
  YAML cannot be used/tested as is by users.
2023-08-18 09:03:30 +08:00
Kubernetes Prow Robot 5755e4362a
Merge pull request #42060 from a-hilaly/beta-match-conditions
Graduate AdmissionWebhookMatchConditions to beta
2023-08-09 08:49:51 -07:00
Amine 42078a08fb Fix typos and add comments to the match conditions example 2023-08-09 09:38:48 +02:00
Jiahui Feng 4dfef3e53f
Document ValidatingAdmissionPolicy variable composition and namespaceObject (#42220)
* variable composition.

* mention namespaceObject.

* Apply suggestions from code review

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* separate commands from output.

* YAML comment.

* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md

Co-authored-by: Tim Bannister <tim@scalefactory.com>

* no shell prompt.

* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md

Co-authored-by: Joe Betz <jpbetz@google.com>

* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md

Co-authored-by: Joe Betz <jpbetz@google.com>

---------

Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
2023-08-08 07:52:16 -07:00
Amine f9c824917f convert the `ValidatingWebhookConfiguration` example into a manifest using a codenew shortcode 2023-07-24 23:10:55 +01:00
Qiming Teng ad7c0712c6 Fix examples test for 1.27
- Some examples are actually not good "examples", i.e. they are not
  not ready for the users to try out.
- Some examples are failing the validation in their current format.
- Some examples skipped the test case.

These issues are fixed.
2023-04-16 17:26:12 +08:00
Jiahui Feng 0d862b9afe message expression and type checking. 2023-04-03 09:38:13 -07:00
Joe Betz cf37b594f2
KEP-3488 ValidatingAdmissionPolicy: Enforcement actions, audit annotations, and secondary authz (#40098)
* Document auditAnnotations, validationActions and authorizer

* Apply suggestions from code review

Co-authored-by: Qiming Teng <tengqm@outlook.com>

* Apply suggestions from code review

Co-authored-by: Tim Allclair <timallclair@gmail.com>

* Apply feedback

---------

Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2023-04-03 08:55:52 -07:00
Tim Allclair 27460b23fa
AdmissionWebhookMatchConditions feature documentation (#40058)
* AdmissionWebhookMatchConditions feature documentation

* #squash ivelichkovich feedback

* #squash sftim feedback

* Correct statement about request.object

* #squash: sftim feedback

* #squash jpbetz feedback

* #squash: denied function removed

* #squash fix match conditions example

* #squash fix expression quoting

* #squash scope authorizatoin check example

* #squash separate RBAC webhook example

* #squash sftim feedback

* #squash add shared client config for example

* Don't use yaml anchors in example
2023-04-03 08:23:51 -07:00
Cici Huang d9a2c85ba5 Update example expression 2023-03-22 20:29:16 +00:00
Cici Huang 457c26b997 Adding MatchConditions into ValidatingAdmissionPolicy 2023-03-22 20:23:48 +00:00
Tim Bannister 1eef742465
Favor EndpointSlice over Endpoints
Document EndpointSlice as the preferred and most appropriate mechanism
to record the backing endpoints of a Service.

Co-authored-by: Rob Scott <rob.scott87@gmail.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2022-10-11 12:38:39 +01:00
Rob Scott d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740 2021-07-26 11:32:06 -07:00
Brock R 36170e4193
Fixed a small field name spelling mistake.
`resourceName` is incorrect and fails upon apply/install. `resourceNames` is the correct file name.
2021-01-27 14:27:43 -07:00
luzg 5dab375fd3 Translate reference/certificate-signing-requests.md into Chinese and fix a bug in origin file, 24065
make change according to Tengqm's comment
2020-10-16 22:27:15 +08:00