Commit Graph

13 Commits (4d88a4ed2c76455870abed6541dc83ff5cadb03e)

Author SHA1 Message Date
David Oppenheimer 8ac484793d Comment out calls to httptest.Server.Close() to work around
https://github.com/golang/go/issues/12262 . See #19254 for
more details. This change should be reverted when we upgrade
to Go 1.6.
2016-01-11 23:02:11 -08:00
Clayton Coleman 554ce403e4 Prevent attach from being served by default via the proxy 2015-10-09 14:33:40 -04:00
Kris Rousey ae6c64d9bb Moving everyone to unversioned client 2015-08-18 10:23:03 -07:00
Stef Walter f6da3fdbe1 kubectl: Add proxy --unix-socket=/file/path option
Proxies on a TCP port are accessible outside the current security
context (eg: uid). Add support for having the proxy listen on a
unix socket, which has permissions applied to it.

We make sure the socket starts its life only accessible by the
current user using Umask.

This is useful for applications like Cockpit and other tools which
want the help of kubectl to handle authentication, configuration and
transport security, but also want to not make that accessible to
all users on a multi-user system.
2015-08-06 11:56:47 +02:00
Mike Danese 8e33cbfa28 rewrite go imports 2015-08-05 17:30:03 -07:00
Jeff Lowdermilk f71a662dc6 Make `kubectl proxy` support picking a random port 2015-07-27 09:56:33 -07:00
Stef Walter 3db0bfdf65 kubectl: Handle splitting host:port when no port is present
In the proxy filter, if listening on port 80 or 443 there will
be no port present in the Host: HTTP header. Just use the entire
thing in these cases, and don't reject requests when no port
is present in the Host: HTTP header.
2015-07-10 09:35:22 +02:00
Daniel Smith ddbe4c914f Fix proxy rewriting 2015-06-24 13:54:14 -07:00
Brendan Burns 4aeee94603 Add some XSRF protection to kubectl proxy. 2015-06-10 20:55:33 -07:00
Daniel Smith 1bab36f772 Fix 'kubectl proxy' to allow the /metrics page to be proxied, without breaking the previous proxy behavior 2015-06-03 18:31:45 -07:00
Eric Paris 6b3a6e6b98 Make copyright ownership statement generic
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
alex fb2b15a797 Replace custom proxy with httputil.ReverseProxy for kubecfg/kubectl.
Fixes #1149 - kubecfg proxy "411 Length Required" error on POST/PUT.
2014-10-21 18:52:18 +01:00
Sam Ghods 4b220f8b0a kubectl: kubecfg rewrite for better modularity and improved UX 2014-10-15 15:29:54 -07:00