rancher
/
webhook
mirror of https://github.com/rancher/webhook.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
514 Commits 193 Branches 442 Tags 5.4 MiB
Commit Graph

514 Commits

Author SHA1 Message Date
Vatsal Parekh a93553b631 Explicitly add Context 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 19:03:45 +05:30
Vatsal Parekh 9d7db6b376 Typo fix 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh e8da5e21b5 Rollback the change 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh b2c62c16b4 Make test more readable 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh 40556337bc Correct validating logic 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh 95e0d480de Add more descriptive err msg 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh b3bb9032b4 Add more info to the test 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh 89f65970b4 Update docs for cluster context 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh 2148872946 Add unit test 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh 6199da8a0e Add test for cluster-contexted roleTemplate 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Vatsal Parekh 5493772417 Add validation to not admit RoleTemplates with both context=cluster & ProjectCreatorDefault=true 
Signed-off-by: Vatsal Parekh <vatsalparekh@outlook.com>
 2024-04-01 17:52:21 +05:30
Tom Lebreux 49160dee86
Add support for k8s 1.28 (#341) 2024-03-27 16:56:34 -04:00
Jonathan Crowther 8fe5a897de
Upgrade golangci-lint and fix all warnings/errors (#346) 2024-03-27 16:42:40 -04:00
Jonathan Crowther a8d40603e5
Change codeowner to new squad (#342) 2024-03-19 14:58:27 -04:00
Tom Lebreux 128b387a3c
Remove CAPI webhook (#338) 2024-03-19 13:24:29 -04:00
Tom Lebreux 92ab3eabe5
Merge pull request #332 from tomleb/fix-validation-rt 
Validate RoleTemplate as non-namespaced
 2024-02-16 09:52:45 -05:00
Tom Lebreux e0d3de431b Validate RoleTemplate as non-namespaced 2024-02-15 16:12:13 -05:00
Max Sokolovsky 75e382d09c
Merge pull request #326 from maxsokolovsky/2.9-validate-container-default-resource-limit 
Validate container default resource limit on projects
 2024-02-13 09:33:52 -05:00
Max Sokolovsky 41ae77d524 Validate container default resource limit on projects 2024-02-12 14:24:54 -05:00
Andreas Kupries 9563bda399
Merge pull request #328 from andreas-kupries/ak-gh40584-rules-validation 
Fix roletemplate.rules validation, added standard k8s checks
 2024-02-02 14:51:25 +01:00
Andreas Kupries 142fd5c462 chore: ditto for global roles (previous was role templates) 2024-02-01 11:22:19 +01:00
Andreas Kupries 0b32a46225 chore: extended integration tests to cover the new checks for resources and api groups 2024-02-01 11:18:21 +01:00
Chad Roberts a98387adbe
Merge pull request #329 from crobby/use29image 
Update to v2.9-head image for integration tests
 2024-01-30 10:36:48 -05:00
Chad Roberts 447f7f7e0c
Update to v2.9-head image for integration tests 2024-01-30 07:52:11 -05:00
Andreas Kupries 9884b4f045 address comment: drop superfluous CheckForVerbs 
note: drop/inline `validateFields`
fix: fields paths reported for globalroles
 2024-01-30 10:36:07 +01:00
Andreas Kupries 1d29e934e6 address comment: simplify ValidateRules 2024-01-30 10:27:13 +01:00
Andreas Kupries d7910fe65c address comment: simplify unit tests, drop dependency on exact error message 2024-01-30 10:26:31 +01:00
Andreas Kupries aa922f09d0 chore: updated roletemplae, globalrole documentation 
chore: regenerated main documentation file
 2024-01-29 13:22:36 +01:00
Andreas Kupries c26d327d39 fix: added proper rule validation to roletemplate 
note: possible superfluousness of CheckForVerbs
 2024-01-29 12:54:55 +01:00
Andreas Kupries a13fbcb2aa refactor: moved globalrole.validateRules to common.ValidateRules 
fix: extended field path with proper index information for validated rule
chore: created unit tests for ValidateRules
 2024-01-29 12:54:28 +01:00
Tom Lebreux 6d6130f5fe
Merge pull request #320 from tomleb/fix-external-project-rt 
Grant inherited permissions to other users
 2024-01-23 15:39:40 -05:00
Jonathan Crowther 775f702d4e
Update rancher version (#321) 2024-01-17 10:08:15 -05:00
Tom Lebreux 9392f57ca1 Evaluate Rules from external RT with project context 
This fixes a bug where a project owner is not able to give some
privileges that they have because those aren't accounted for in the
webhook.
 2024-01-16 13:05:39 -05:00
Tom Lebreux 23408dae65 Fix inherted -> inherited typo 2024-01-16 13:05:19 -05:00
Jonathan Crowther b18c38740a
Add webhook checks for NamespacedRules (#309) 
* Add role and rolebinding webhook validation. Add NamespacedRules escalation checks for GlobalRoles

* Update rancher/pkg/apis

* Fix linting issue

* Log error and add test for it
 2024-01-15 17:17:15 -05:00
Michael Bolot c0ff8f505e
Merge pull request #317 from thatmidwesterncoder/go_generate 
[v0.5] `go generate` to update copyright year
 2024-01-11 13:56:54 -06:00
Jacob Lindgren 9253ca52d1
`go generate` to update copyright year 2024-01-11 10:06:31 -06:00
Kevin Joiner 37172ffa3d
Merge pull request #304 from rancher/renovate/golangci-golangci-lint-1.x 
Update dependency golangci/golangci-lint to v1.55.2
 2024-01-04 12:14:17 -05:00
renovate-rancher[bot] 473939b2fd
Update dependency golangci/golangci-lint to v1.55.2 2023-12-20 04:38:47 +00:00
Kevin Joiner ad6cf26e6d
Merge pull request #314 from KevinJoiner/go-v1.21 
Go v1.21
 2023-12-19 14:17:40 -05:00
Kevin Joiner b5a9aaf8a0 Update docs gen to use cmp 2023-12-19 10:05:22 -05:00
Kevin Joiner 6e4a0697e3 Update to go v1.21 2023-12-19 09:45:18 -05:00
Kevin Joiner 52788ac571
Merge pull request #300 from rancher/renovate/helm-helm-3.x 
Update dependency helm/helm to v3.13.3
 2023-12-19 09:12:48 -05:00
Kevin Joiner 5c1fe0fff9
Merge pull request #305 from rohitsakala/master 
Update docs
 2023-12-19 09:11:50 -05:00
renovate-rancher[bot] 9b9cde5c0f
Update dependency helm/helm to v3.13.3 2023-12-14 04:40:06 +00:00
Kevin Joiner 6aca51f8b3
Merge pull request #311 from KevinJoiner/remove-s390x-image 
Remove s390x from drone.
 2023-12-04 15:14:14 -05:00
Kevin Joiner 57f1478b7a Remove s390x from drone. 2023-12-04 14:32:48 -05:00
Jake Hyde f93011d8d8
Merge pull request #310 from jakefhyde/revert-277 
Revert "Merge pull request #277"
 2023-11-29 09:34:25 -07:00
Jake Hyde 38fc07916e
Revert "Merge pull request #277 from thatmidwesterncoder/bugfix_nodedriver_validation" 
This reverts commit 3ed3c68118, reversing
changes made to ddb05820d4.
 2023-11-28 17:31:44 -05:00
Sakala Venkata Krishna Rohit a78864aa93
Update README.md 
Co-authored-by: Max Sokolovsky <genexpr@protonmail.com>
 2023-10-25 09:05:50 -07:00