Clayton Coleman
772ab8e1b4
Load initializers from dynamic config
...
Handle failure cases on startup gracefully to avoid causing cascading
errors and poor initialization in other components. Initial errors from
config load cause the initializer to pause and hold requests. Return
typed errors to better communicate failures to clients.
Add code to handle two specific cases - admin wants to bypass
initialization defaulting, and mirror pods (which want to bypass
initialization because the kubelet owns their lifecycle).
2017-06-05 19:12:41 -04:00
Derek Carr
a71bea312a
ResourceQuota admission control injects registry
2017-05-18 23:17:13 -04:00
Chao Xu
9d7a8df5ee
add gc admission plugin that prevents user who doesn't have delete permission of the owner from setting blockOwnerDeletion
2017-04-13 11:55:22 -07:00
Hemant Kumar
b0581d688d
Fix Multizone pv creation on GCE
...
When Multizone is enabled static PV creation on GCE
fails because Cloud provider configuration is not
available in admission plugins.
2017-02-28 12:24:14 -05:00
Andy Goldstein
022bff7fbe
Switch admission to use shared informers
2017-02-23 11:16:09 -05:00
deads2k
9488e2ba30
move testing/core to client-go
2017-01-26 13:54:40 -05:00
deads2k
01b3b2b461
move admission to genericapiserver
2017-01-18 08:15:19 -05:00
Clayton Coleman
9a2a50cda7
refactor: use metav1.ObjectMeta in other types
2017-01-17 16:17:19 -05:00
deads2k
77b4d55982
mechanical
2017-01-16 09:35:12 -05:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
deads2k
2861509b6d
refactored admission to avoid internal client references
2017-01-03 15:50:12 -05:00
Clayton Coleman
5df8cc39c9
refactor: generated
2016-12-03 19:10:46 -05:00
Chao Xu
1044aa4500
plugin/admission; including resourcequota admission
2016-11-23 15:53:09 -08:00
pweil-
5c66dcb526
inject authorizer when admission controller requests it
2016-10-12 13:05:34 -04:00
Mike Danese
a765d59932
move informer and controller to pkg/client/cache
...
Signed-off-by: Mike Danese <mikedanese@google.com>
2016-09-15 12:50:08 -07:00
Daniel Smith
a291846cd1
Revert "Remove deprecated Namespace admission plug-ins"
2016-08-28 10:20:44 -07:00
derekwaynecarr
c727fdc81f
Remove deprecated namespace admission controllers
2016-08-26 11:14:55 -04:00
derekwaynecarr
0339ef7961
Fix usage of shared informer in namespace admission controllers
2016-08-01 13:40:34 -04:00
derekwaynecarr
09c97a2acc
Disable flaky unit test in admission plugin in NamespaceAutoProvision
2016-07-26 17:36:14 -04:00
Dominika Hodovska
037d116add
Factory for SharedIndexInformers
2016-07-21 14:04:48 +02:00
Dominika Hodovska
fc0a3c6dcb
Allow shareable resources for admission control plugins
2016-07-20 12:53:52 +02:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Jordan Liggitt
29252acd1a
Change rest storage Update interface to retrieve updated object
...
Add OldObject to admission attributes
Update resthandler Patch/Update admission plumbing
2016-05-23 21:09:26 -04:00
deads2k
0061479890
fully qualify admission resources and kinds
2016-04-26 07:55:33 -04:00
Chao Xu
ad46715f51
generate fake client for release_1_2
2016-02-17 16:10:02 -08:00
Chao Xu
cddd7b56a4
replace client with clientset in kubelet and other places
2016-02-02 20:28:45 -08:00
deads2k
9fda7f1812
update StatusDetails to handle Groups
2015-12-17 09:14:12 -05:00
deads2k
3f045cf168
udpate admission for API groups
2015-12-07 08:55:01 -05:00
Daniel Smith
15b30b8b09
Move version agnostic parts of client
...
pkg/client/unversioned/cache -> pkg/client/cache
pkg/client/unversioned/record -> pkg/client/record
2015-09-10 17:17:59 -07:00
deads2k
7e180c258d
update testclient for delegating reaction chain
2015-09-01 12:58:35 -04:00
Kris Rousey
ae6c64d9bb
Moving everyone to unversioned client
2015-08-18 10:23:03 -07:00
Mike Danese
8e33cbfa28
rewrite go imports
2015-08-05 17:30:03 -07:00
deads2k
182885e897
make testclient more precise
2015-08-04 13:35:59 -04:00
Mike Danese
1b84fb7d74
make testclient threadsafe by guarding internal state with accessors
2015-07-29 16:17:17 -07:00
derekwaynecarr
f6fb72ec51
Admission control attributes has access to resource name
2015-06-23 13:54:55 -04:00
derekwaynecarr
fce7adf3e7
Admission control exposes subresource
2015-06-18 15:00:46 -04:00
Cesar Wong
68ad63b5e2
Add operation checking to admission control handlers
...
Adds a new method to the handler interface that returns true only if the
admission control handler handles that operation.
2015-05-21 13:51:43 -04:00
Paul Weil
aaeb1dad93
expose user info to admission controllers
2015-05-13 21:31:51 -04:00
Eric Paris
6b3a6e6b98
Make copyright ownership statement generic
...
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
derekwaynecarr
81dcd8c836
Improve error message when name is omitted but generateName is available
2015-04-16 13:06:19 -04:00
Clayton Coleman
51db3bd654
Create a new testclient package that can be backed by disk files
...
Standardize how our fakes are used so that a test case can use a
simpler mechanism for providing large, complex data sets, as well
as represent queries over time.
2015-04-07 14:56:15 -04:00
derekwaynecarr
267ef26b0f
Do not block admission if namespace already exists
2015-03-26 15:59:09 -04:00
derekwaynecarr
468bf1da75
Enable common set of admission controllers across salt providers
2015-03-11 11:06:00 -04:00
derekwaynecarr
0bd0e12bbc
Add support for Namespace as Kind
...
Add example for using namespaces
2015-02-10 09:50:50 -05:00