Commit Graph

15 Commits (304debc77cceb12dc9253f36f5ce455bb90b778d)

Author SHA1 Message Date
Kubernetes Submit Queue aaeccd3d10
Merge pull request #60145 from php-coder/psp_authz_via_policy_group
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md">here</a>.

PSP plugin: allow authorizing via "use" verb in policy API group

**What this PR does / why we need it**:
In order to determine whether a service account/user has access to PSP, PodSecurityPolicy admission plugin tests whether a service account/user is authorized for "use" verb in `extensions` API group. As PSP is being migrated to `policy` API group, we need to support its new location. This PR adds such a support by checking in both API groups.

**Which issue(s) this PR fixes**:
Addressed to: https://github.com/kubernetes/features/issues/5
Follow-up to: https://github.com/kubernetes/kubernetes/pull/54933
2018-02-23 07:55:23 -08:00
Slava Semushin e69e879969 examples/podsecuritypolicy: add owners. 2018-02-22 21:46:15 +01:00
Slava Semushin 3d4fa8a189 Modify PodSecurityPolicy admission plugin to additionally allow authorizing via "use" verb in policy API group. 2018-02-22 19:23:02 +01:00
Slava Semushin 64104481c5 Update examples to use PSPs from the policy API group. 2018-02-19 20:14:28 +01:00
Slava Semushin 1f0c5e1587 examples/podsecuritypolicy/rbac: fix names in comments and sync with examples repository. 2017-10-27 16:15:19 +02:00
Slava Semushin 9015a82692 PodSecurityPolicy.allowedCapabilities: add support for using * to allow to request any capabilities.
Also modify "privileged" PSP to use it and allow privileged users to use
any capabilities.
2017-09-06 12:18:09 +02:00
Chen Rong d23df051e1 update to rbac v1 in yaml file 2017-08-21 17:29:37 +08:00
Kubernetes Submit Queue 258e41abe5 Merge pull request #48862 from gyliu513/psp
Automatic merge from submit-queue

Correct the comment in PSP examples.

**What this PR does / why we need it**:

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #

**Special notes for your reviewer**:

**Release note**:

```release-note
none
```
2017-07-14 11:46:05 -07:00
Sebastien Goasguen b0bc271ef3 add redirect notice in all readme files 2017-07-14 17:18:01 +02:00
Guangya Liu a8e7be58cf Correct the comment in PSP examples. 2017-07-13 16:58:36 +08:00
Slava Semushin 70b0e35873 examples/podsecuritypolicy/rbac: allow to use projected volumes in restricted PSP. 2017-05-17 19:03:12 +02:00
Eric Chiang 8cb6eb0b21 PodSecurityPolicy example: fix explanation 2017-02-25 11:41:57 -08:00
Jordan Liggitt 9e6a3496b4
Update rbac data to v1beta1 2017-02-14 00:50:31 -05:00
Tim Hockin 0772c9b6f9 Remove a few versioned-warnings that snuck in, again 2016-11-18 13:28:46 -08:00
pweil- bbe9c8f96d add authz checks to allowed policies admission 2016-11-08 08:36:27 -05:00