Jordan Liggitt
dd7be70a4a
Add rbac.authorization.k8s.io/v1
2017-08-09 17:04:54 -04:00
Eric Chiang
e2f2ab67f2
*: remove --insecure-allow-any-token option
...
e2e and integration tests have been switched over to the tokenfile
authenticator instead.
```release-note
The --insecure-allow-any-token flag has been removed from kube-apiserver. Users of the flag should use impersonation headers instead for debugging.
```
2017-07-18 16:03:15 -07:00
Jacob Simpson
8bcbbd4d08
Migrate api.Registry to testapi.Groups in tests.
2017-07-17 15:05:38 -07:00
deads2k
be39283923
plumb stopch to post start hook index since many of them are starting go funcs
2017-05-11 09:16:13 -04:00
Mike Danese
21617a60ae
don't use build tags to mark integration tests
2017-04-28 14:19:39 -07:00
Jordan Liggitt
7f4e5c5676
Use namespace from context
2017-03-07 14:02:13 -05:00
Jordan Liggitt
2a76fa1c8f
Switch RBAC subject apiVersion to apiGroup in v1beta1
2017-02-13 15:33:09 -05:00
Dr. Stefan Schimanski
536460e1d9
Mechanical fixup imports: pkg/genericapiserver
2017-02-03 08:15:45 +01:00
Dr. Stefan Schimanski
4077e0bba7
genericapiserver: move authn plugins into k8s.io/apiserver
2017-01-24 20:56:03 +01:00
Clayton Coleman
469df12038
refactor: move ListOptions references to metav1
2017-01-23 17:52:46 -05:00
deads2k
ee6752ef20
find and replace
2017-01-20 08:04:53 -05:00
Dr. Stefan Schimanski
3d9449a353
genericapiserver: fix imports
2017-01-19 13:06:47 +01:00
Kubernetes Submit Queue
302d3ab1d7
Merge pull request #39625 from deads2k/rbac-36-beta
...
Automatic merge from submit-queue (batch tested with PRs 39625, 39842)
Add RBAC v1beta1
Add `rbac.authorization.k8s.io/v1beta1`. This scrubs `v1alpha1` to remove cruft, then add `v1beta1`. We'll update other bits of infrastructure to code to `v1beta1` as a separate step.
```release-note
The `attributeRestrictions` field has been removed from the PolicyRule type in the rbac.authorization.k8s.io/v1alpha1 API. The field was not used by the RBAC authorizer.
```
@kubernetes/sig-auth-misc @liggitt @erictune
2017-01-18 10:19:11 -08:00
deads2k
e74efe41a0
add rbac v1beta1
2017-01-18 09:49:33 -05:00
deads2k
4f915039e4
move pkg/client/transport to client-go
2017-01-18 07:56:01 -05:00
Clayton Coleman
9a2a50cda7
refactor: use metav1.ObjectMeta in other types
2017-01-17 16:17:19 -05:00
deads2k
f1176d9c5c
mechanical repercussions
2017-01-13 08:27:14 -05:00
Timothy St. Clair
fbc5323dad
Refactor registry to use store vs. etcd
2017-01-12 09:23:38 -06:00
deads2k
c4fae4e690
mechanical repercussions
2017-01-11 15:20:36 -05:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
Jordan Liggitt
a2670d3b9d
Allow rolebinding/clusterrolebinding with explicit bind permission check
2017-01-10 14:34:33 -05:00
deads2k
4d7fcae85a
mechanicals
2017-01-05 11:14:27 -05:00
Monis Khan
a6bafbacbf
Refactor REST storage to use generic defaults
...
Signed-off-by: Monis Khan <mkhan@redhat.com>
2016-12-08 17:24:21 -05:00
deads2k
2923d09091
remove rbac super user
2016-12-05 13:49:54 -05:00
deads2k
f56cbfa8d5
add healthz to genericapiserver
2016-11-01 14:39:33 -04:00
deads2k
ceaf026881
slim down authorization listing interfaces
2016-10-13 07:50:01 -04:00
deads2k
518d5500c7
remove testapi.Default.GroupVersion
2016-10-07 10:10:54 -04:00
Dr. Stefan Schimanski
61409c821b
Turn embedding into composition: master.Config.{Config -> GenericConfig}
2016-09-29 08:09:39 +02:00
deads2k
b330b0a220
start creating controller SA roles. start with just one
2016-09-26 09:31:36 -04:00
deads2k
a2a6423574
separate RESTStorage by API group
2016-09-20 08:00:50 -04:00
deads2k
7d1f13d3e0
add GenericAPIServer posthooks for initialization
2016-09-19 14:58:27 -04:00
deads2k
8c788233e7
change rbac roleref type
2016-09-09 09:55:51 -04:00
Hongchao Deng
d0938094d9
move new etcd storage into cacher
2016-08-12 18:40:20 -07:00
deads2k
aa3db4d995
make the resource prefix in etcd configurable for cohabitation
2016-07-27 07:51:40 -04:00
Mike Danese
f3de21bdf0
move integration tests into individual pacakges
...
Signed-off-by: Mike Danese <mikedanese@google.com>
2016-07-07 00:54:15 -07:00