107 Commits (09d3dce38a3934b01528f9d0a7eb061b1de1225b)

Author	SHA1	Message	Date
Jordan Liggitt	c895331277	Make master take authenticator.Request interface instead of tokenfile	2014-11-19 15:07:51 -05:00
Eric Tune	6e81e8c896	Basic ACL file. ... Added function to read basic ACL from a CSV file. Added implementation of Authorize based on that file's policies. Added docs on authentication and authorization. Added example file and tested it.	2014-11-05 16:06:22 -08:00
Eric Tune	1668c6f107	Authorization based on namespace, kind, readonly. ... Also, pass Authorizer into master.Config.	2014-11-03 17:45:15 -08:00
Eric Tune	3045035512	Get user from request and put in authz attribs. ... Added integration tests for user-based auth.	2014-11-03 16:38:56 -08:00
Eric Tune	55c2d6bbbb	Add basic Authorization. ... Added basic interface for authorizer implementations. Added default "authorize everything" and "authorize nothing implementations. Added authorization check immediately after authentication check. Added an integration test of authorization at the HTTP level of abstraction.	2014-10-31 12:04:33 -07:00
Eric Tune	800284164a	Fix format specifiers in Printf-type functions.	2014-10-09 17:06:32 -07:00
Clayton Coleman	c8ef4b8230	Add simple Bearer authenticator filter for Kube ... * Default file based implementation * Define some simple interfaces * Add -token_auth_file to apiserver that will start the apiserver with a request filter for tokens	2014-10-07 13:25:12 -04:00