Qiming Teng
60bf42a527
Update test cases for v1.28
...
This PR makes sure the manifests under `content/en/examples`
are valid in v1.28. The primary fixes are:
- Updated the go.mod/go.sum file for testing against v1.28.0 release.
- Revise test case code to ensure newly added manifests are tested;
- Adapt Pod validation options to upstream validation code change;
- Move a ValidatingWebhookConfiguration YAML back to inline because
the manifest cannot validate against the validator. The CA bundle
referenced is not a valid string (base64 encoded). That means the
YAML cannot be used/tested as is by users.
2023-08-18 09:03:30 +08:00
Kubernetes Prow Robot
5755e4362a
Merge pull request #42060 from a-hilaly/beta-match-conditions
...
Graduate AdmissionWebhookMatchConditions to beta
2023-08-09 08:49:51 -07:00
Amine
42078a08fb
Fix typos and add comments to the match conditions example
2023-08-09 09:38:48 +02:00
Jiahui Feng
4dfef3e53f
Document ValidatingAdmissionPolicy variable composition and namespaceObject ( #42220 )
...
* variable composition.
* mention namespaceObject.
* Apply suggestions from code review
Co-authored-by: Tim Bannister <tim@scalefactory.com>
* separate commands from output.
* YAML comment.
* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md
Co-authored-by: Tim Bannister <tim@scalefactory.com>
* no shell prompt.
* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md
Co-authored-by: Joe Betz <jpbetz@google.com>
* Update content/en/docs/reference/access-authn-authz/validating-admission-policy.md
Co-authored-by: Joe Betz <jpbetz@google.com>
---------
Co-authored-by: Tim Bannister <tim@scalefactory.com>
Co-authored-by: Joe Betz <jpbetz@google.com>
2023-08-08 07:52:16 -07:00
Amine
f9c824917f
convert the `ValidatingWebhookConfiguration` example into a manifest using a codenew shortcode
2023-07-24 23:10:55 +01:00
Qiming Teng
ad7c0712c6
Fix examples test for 1.27
...
- Some examples are actually not good "examples", i.e. they are not
not ready for the users to try out.
- Some examples are failing the validation in their current format.
- Some examples skipped the test case.
These issues are fixed.
2023-04-16 17:26:12 +08:00
Jiahui Feng
0d862b9afe
message expression and type checking.
2023-04-03 09:38:13 -07:00
Joe Betz
cf37b594f2
KEP-3488 ValidatingAdmissionPolicy: Enforcement actions, audit annotations, and secondary authz ( #40098 )
...
* Document auditAnnotations, validationActions and authorizer
* Apply suggestions from code review
Co-authored-by: Qiming Teng <tengqm@outlook.com>
* Apply suggestions from code review
Co-authored-by: Tim Allclair <timallclair@gmail.com>
* Apply feedback
---------
Co-authored-by: Qiming Teng <tengqm@outlook.com>
Co-authored-by: Tim Allclair <timallclair@gmail.com>
2023-04-03 08:55:52 -07:00
Tim Allclair
27460b23fa
AdmissionWebhookMatchConditions feature documentation ( #40058 )
...
* AdmissionWebhookMatchConditions feature documentation
* #squash ivelichkovich feedback
* #squash sftim feedback
* Correct statement about request.object
* #squash: sftim feedback
* #squash jpbetz feedback
* #squash: denied function removed
* #squash fix match conditions example
* #squash fix expression quoting
* #squash scope authorizatoin check example
* #squash separate RBAC webhook example
* #squash sftim feedback
* #squash add shared client config for example
* Don't use yaml anchors in example
2023-04-03 08:23:51 -07:00
Cici Huang
d9a2c85ba5
Update example expression
2023-03-22 20:29:16 +00:00
Cici Huang
457c26b997
Adding MatchConditions into ValidatingAdmissionPolicy
2023-03-22 20:23:48 +00:00
Tim Bannister
1eef742465
Favor EndpointSlice over Endpoints
...
Document EndpointSlice as the preferred and most appropriate mechanism
to record the backing endpoints of a Service.
Co-authored-by: Rob Scott <rob.scott87@gmail.com>
Co-authored-by: Shannon Kularathna <ax3shannonkularathna@gmail.com>
2022-10-11 12:38:39 +01:00
Rob Scott
d710925768
Adding documentation about Endpoints write access in wake of CVE-2021-25740
2021-07-26 11:32:06 -07:00
Brock R
36170e4193
Fixed a small field name spelling mistake.
...
`resourceName` is incorrect and fails upon apply/install. `resourceNames` is the correct file name.
2021-01-27 14:27:43 -07:00
luzg
5dab375fd3
Translate reference/certificate-signing-requests.md into Chinese and fix a bug in origin file, 24065
...
make change according to Tengqm's comment
2020-10-16 22:27:15 +08:00