Kubernetes Prow Robot
6c31101257
Merge pull request #74283 from xing-yang/csi_crd_controller
...
CSINodeInfo and CSIDriver Controller Changes
2019-03-05 04:44:42 -08:00
Kubernetes Prow Robot
02bd34e7b0
Merge pull request #74531 from liggitt/ingress-rbac
...
Update RBAC roles for networking.k8s.io ingresses
2019-03-05 00:48:01 -08:00
Xing Yang
85867e5625
Modify node admission and node authorizer
2019-03-04 16:42:12 -08:00
Kubernetes Prow Robot
f16035600a
Merge pull request #73807 from dekkagaijin/discovery-hardening
...
harden the default RBAC discovery clusterrolebindings
2019-03-01 21:49:30 -08:00
Jake Sanders
9c7d31928d
harden the default RBAC discovery clusterrolebindings
2019-03-01 18:45:05 -08:00
Kubernetes Prow Robot
55a65763c0
Merge pull request #71479 from soggiest/podpreset-initcontainers
...
PodPreset: Add same functionality for init containers as standard containers
2019-02-28 20:35:45 -08:00
Andrew Kim
01933b02a3
replace usage of v1beta1 VolumeAttachments with v1
2019-02-27 15:42:12 -05:00
Jordan Liggitt
d1e865ee34
Update client callers to use explicit versions
2019-02-26 08:36:30 -05:00
Jordan Liggitt
85165b40fa
Update RBAC roles for networking.k8s.io ingresses
2019-02-25 11:40:44 -05:00
danielqsj
3c9ba7f298
fix typo
2019-02-22 22:38:48 +08:00
danielqsj
5733241f7a
fix shellcheck in plugin/pkg/admission/imagepolicy/gencerts.sh
2019-02-22 15:10:06 +08:00
Kubernetes Prow Robot
0ffd59e403
Merge pull request #74154 from mbohlool/gimli
...
Use Request Object interfaces instead of static scheme that is more appropriate for CRDs
2019-02-19 07:21:53 -08:00
Mehdy Bohlool
cebb4ee2ac
Remove the propagated scheme from the Admission chain
2019-02-16 13:28:47 -08:00
Mehdy Bohlool
d08bc3774d
Mechanical changes due to signature change for Admit and Validate functions
2019-02-16 13:28:47 -08:00
Subramanian Neelakantan
ba9a9cf7c3
Applies zone labels to newly created vsphere volumes
2019-02-15 15:06:01 +05:30
Kubernetes Prow Robot
808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable
...
Remove executable file permission from OWNERS files
2019-02-14 23:55:45 -08:00
Andrew Kim
ca6a051b00
remove cloud provider dependencies to pkg/volume
...
Co-authored-by: Weibin Lin <linweibin1@huawei.com>
2019-02-09 01:16:55 -05:00
Kubernetes Prow Robot
834c9a5e3d
Merge pull request #72491 from liggitt/delegated-auth-permissions
...
Ensure controller manager and scheduler can perform delegated auth checks
2019-02-08 11:53:52 -08:00
Kubernetes Prow Robot
b50c643be0
Merge pull request #73540 from rlenferink/patch-5
...
Updated OWNERS files to include link to docs
2019-02-08 09:05:56 -08:00
Jordan Liggitt
4212a9a05a
Ensure controller manager and scheduler can perform delegated auth checks
2019-02-08 11:15:52 -05:00
Davanum Srinivas
b975573385
move pkg/kubelet/apis/well_known_labels.go to staging/src/k8s.io/api/core/v1/
...
Co-Authored-By: Weibin Lin <linweibin1@huawei.com>
Change-Id: I163b2f2833e6b8767f72e2c815dcacd0f4e504ea
2019-02-05 13:39:07 -05:00
Roy Lenferink
b43c04452f
Updated OWNERS files to include link to docs
2019-02-04 22:33:12 +01:00
Kubernetes Prow Robot
d654b49c0e
Merge pull request #73097 from bsalamat/fix_taint_nodes
...
Add NotReady taint to new nodes during admission
2019-01-24 23:46:23 -08:00
Kubernetes Prow Robot
5fc286fb3c
Merge pull request #73102 from andrewsykim/add-openstack-pvl-admission
...
Add Cinder to PersistentVolumeLabel Admission Controller
2019-01-24 14:55:12 -08:00
Kubernetes Prow Robot
e28c757e87
Merge pull request #72972 from liggitt/remove-alpha-initializers
...
Remove use of alpha initializers
2019-01-24 14:54:52 -08:00
Andrew Kim
467a3e5f20
add andrewsykim, dims and msau42 as PVL admission OWNERS
2019-01-24 13:32:01 -05:00
Bobby (Babak) Salamat
763cb708d1
Autogenerated files
2019-01-24 10:31:23 -08:00
Bobby (Babak) Salamat
c2a4d2cbdf
Add a default admission controller to taint new nodes on creation.
2019-01-24 10:31:23 -08:00
andrewsykim
32b6225c72
refactor PVL unit tests to use test tables & add test cases for remaining cloud providers
2019-01-24 13:29:56 -05:00
andrewsykim
22fce22a7e
add support for Cinder volumes in PersistentVolumeLabel admission controller
2019-01-24 13:29:56 -05:00
andrewsykim
1a316015e3
refactor persistent volume labeler admission controller to use cloudprovider.PVLabler
2019-01-24 13:29:56 -05:00
Kubernetes Prow Robot
4cd759dbe0
Merge pull request #73001 from shivnagarajan/remove_deprecated_taints
...
remove remaining deprecated taints from 1.9
2019-01-24 05:18:57 -08:00
Jordan Liggitt
1a15d80967
generated
2019-01-23 16:34:44 -05:00
Jordan Liggitt
17aa60686e
Deprecate and remove use of alpha metadata.initializers field, remove IncludeUninitialized options
2019-01-23 16:34:43 -05:00
Jordan Liggitt
52519ecb1c
remove deprecated openapi paths in favor of /openapi/v2
2019-01-21 16:33:41 -05:00
Shiv Nagarajan
36ee154243
remove deprecated taints from 1.9
2019-01-16 21:20:57 -05:00
Jordan Liggitt
9229399bd6
Remove build/verify scripts for swagger 1.2 API docs, API server swagger ui / swagger 1.2 config
2019-01-15 13:33:06 -05:00
Justin SB
dd19b923b7
Remove executable file permission from OWNERS files
2019-01-11 16:42:59 -08:00
Kubernetes Prow Robot
33a9c6e892
Merge pull request #72737 from liggitt/deprecate-deny-exec-admission
...
Deprecate DenyEscalatingExec and DenyExecOnPrivileged admission plugins
2019-01-11 03:30:48 -08:00
Jordan Liggitt
61be3683f3
Deprecate DenyEscalatingExec and DenyExecOnPrivileged admission plugins
2019-01-10 11:57:12 -05:00
Kubernetes Prow Robot
cc67ccfd7f
Merge pull request #71731 from cheftako/leaseMetric
...
Add gauge metric for master of leader election.
2019-01-08 08:57:53 -08:00
Jordan Liggitt
73dcfe12da
Stop checking VolumeScheduling feature gate
2018-12-27 17:45:45 -05:00
Walter Fender
f192657380
Add gauge metric for master of leader election.
...
Fixes #71730
0 indicates standby, 1 indicates master, label indicates which lease.
Tweaked name and documentation
Factored in Mike Danese feedback.
Removed dependency on prometheus from client-go using adapter.
Centralized adapter import.
Fixed godeps
Fixed boilerplate.
Put in fixes for caesarxuchao
2018-12-27 09:40:33 -08:00
Jordan Liggitt
0ff455e340
generated files
2018-12-19 11:19:12 -05:00
Jordan Liggitt
fd9e9b01b1
Remove uses of extensions/v1beta1 clients
2018-12-19 11:18:53 -05:00
wojtekt
546ece7b2c
Promote NodeLease to Beta and enable by default
2018-12-17 10:19:22 +01:00
k8s-ci-robot
5289fab2f6
Merge pull request #71396 from liggitt/forbidden-messages
...
Improve node authorizer and noderestriction forbidden messages
2018-11-30 00:04:46 -08:00
k8s-ci-robot
79e5cb2cb7
Merge pull request #71302 from liggitt/verify-unit-test-feature-gates
...
Split mutable and read-only access to feature gates, limit tests to readonly access
2018-11-29 21:45:12 -08:00
soggiest
1ec6672580
Added similar functionality for init containers as standard containers in PodPreset admission controller
2018-11-27 14:31:32 -08:00
WanLinghao
0bab5ee5ad
Currently the root-ca-cert-publisher was shadowed by BoundServiceAccountTokenVolume feature gate.
...
But its corresponding bootstrap RBAC policy was shadowed by TokenRequest feature gate.
This patch fix it.
2018-11-27 11:44:35 +08:00