Commit Graph

937 Commits (9c7db008923b24657b62f2d37c03ec6a7d9e94d2)

Author SHA1 Message Date
Mansi Agarwal 7b1b46b98c Accept admission request if resource is being deleted 2019-05-02 14:07:04 -07:00
Jordan Liggitt 42a89ea81e Short-circuit quota admission rejection on zero-delta updates 2019-05-02 14:07:04 -07:00
Antoine Pelisse 55f9eeed6c Ignore changes to managed field in noderestriction
The validation is failing because the managedfields are changed when the
object is updated. We don't have a good way to verify that the changes
are only the ones that are supposed to happen, so we'll just ignore them
for now.
2019-03-06 13:48:38 -08:00
Kubernetes Prow Robot 890b5c1d9a
Merge pull request #74582 from SataQiu/fix-golint-2019022602
fix some golint failures for plugin/pkg/admission/...
2019-03-05 06:50:46 -08:00
Xing Yang 85867e5625 Modify node admission and node authorizer 2019-03-04 16:42:12 -08:00
Kubernetes Prow Robot 55a65763c0
Merge pull request #71479 from soggiest/podpreset-initcontainers
PodPreset: Add same functionality for init containers as standard containers
2019-02-28 20:35:45 -08:00
Jordan Liggitt d1e865ee34 Update client callers to use explicit versions 2019-02-26 08:36:30 -05:00
SataQiu f8c4aba0cb fix some golint failures for plugin/pkg/admission/... 2019-02-26 17:12:40 +08:00
danielqsj 3c9ba7f298 fix typo 2019-02-22 22:38:48 +08:00
danielqsj 5733241f7a fix shellcheck in plugin/pkg/admission/imagepolicy/gencerts.sh 2019-02-22 15:10:06 +08:00
Kubernetes Prow Robot 0ffd59e403
Merge pull request #74154 from mbohlool/gimli
Use Request Object interfaces instead of static scheme that is more appropriate for CRDs
2019-02-19 07:21:53 -08:00
Mehdy Bohlool cebb4ee2ac Remove the propagated scheme from the Admission chain 2019-02-16 13:28:47 -08:00
Mehdy Bohlool d08bc3774d Mechanical changes due to signature change for Admit and Validate functions 2019-02-16 13:28:47 -08:00
Subramanian Neelakantan ba9a9cf7c3 Applies zone labels to newly created vsphere volumes 2019-02-15 15:06:01 +05:30
Kubernetes Prow Robot 808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable
Remove executable file permission from OWNERS files
2019-02-14 23:55:45 -08:00
Andrew Kim ca6a051b00 remove cloud provider dependencies to pkg/volume
Co-authored-by: Weibin Lin <linweibin1@huawei.com>
2019-02-09 01:16:55 -05:00
Kubernetes Prow Robot b50c643be0
Merge pull request #73540 from rlenferink/patch-5
Updated OWNERS files to include link to docs
2019-02-08 09:05:56 -08:00
Davanum Srinivas b975573385
move pkg/kubelet/apis/well_known_labels.go to staging/src/k8s.io/api/core/v1/
Co-Authored-By: Weibin Lin <linweibin1@huawei.com>

Change-Id: I163b2f2833e6b8767f72e2c815dcacd0f4e504ea
2019-02-05 13:39:07 -05:00
Roy Lenferink b43c04452f Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00
Kubernetes Prow Robot d654b49c0e
Merge pull request #73097 from bsalamat/fix_taint_nodes
Add NotReady taint to new nodes during admission
2019-01-24 23:46:23 -08:00
Kubernetes Prow Robot 5fc286fb3c
Merge pull request #73102 from andrewsykim/add-openstack-pvl-admission
Add Cinder to PersistentVolumeLabel Admission Controller
2019-01-24 14:55:12 -08:00
Kubernetes Prow Robot e28c757e87
Merge pull request #72972 from liggitt/remove-alpha-initializers
Remove use of alpha initializers
2019-01-24 14:54:52 -08:00
Andrew Kim 467a3e5f20 add andrewsykim, dims and msau42 as PVL admission OWNERS 2019-01-24 13:32:01 -05:00
Bobby (Babak) Salamat 763cb708d1 Autogenerated files 2019-01-24 10:31:23 -08:00
Bobby (Babak) Salamat c2a4d2cbdf Add a default admission controller to taint new nodes on creation. 2019-01-24 10:31:23 -08:00
andrewsykim 32b6225c72 refactor PVL unit tests to use test tables & add test cases for remaining cloud providers 2019-01-24 13:29:56 -05:00
andrewsykim 22fce22a7e add support for Cinder volumes in PersistentVolumeLabel admission controller 2019-01-24 13:29:56 -05:00
andrewsykim 1a316015e3 refactor persistent volume labeler admission controller to use cloudprovider.PVLabler 2019-01-24 13:29:56 -05:00
Jordan Liggitt 1a15d80967 generated 2019-01-23 16:34:44 -05:00
Jordan Liggitt 17aa60686e Deprecate and remove use of alpha metadata.initializers field, remove IncludeUninitialized options 2019-01-23 16:34:43 -05:00
Shiv Nagarajan 36ee154243 remove deprecated taints from 1.9 2019-01-16 21:20:57 -05:00
Justin SB dd19b923b7
Remove executable file permission from OWNERS files 2019-01-11 16:42:59 -08:00
Kubernetes Prow Robot 33a9c6e892
Merge pull request #72737 from liggitt/deprecate-deny-exec-admission
Deprecate DenyEscalatingExec and DenyExecOnPrivileged admission plugins
2019-01-11 03:30:48 -08:00
Jordan Liggitt 61be3683f3 Deprecate DenyEscalatingExec and DenyExecOnPrivileged admission plugins 2019-01-10 11:57:12 -05:00
Kubernetes Prow Robot cc67ccfd7f
Merge pull request #71731 from cheftako/leaseMetric
Add gauge metric for master of leader election.
2019-01-08 08:57:53 -08:00
Jordan Liggitt 73dcfe12da Stop checking VolumeScheduling feature gate 2018-12-27 17:45:45 -05:00
Walter Fender f192657380 Add gauge metric for master of leader election.
Fixes #71730
0 indicates standby, 1 indicates master, label indicates which lease.
Tweaked name and documentation
Factored in Mike Danese feedback.
Removed dependency on prometheus from client-go using adapter.
Centralized adapter import.
Fixed godeps
Fixed boilerplate.
Put in fixes for caesarxuchao
2018-12-27 09:40:33 -08:00
Jordan Liggitt 0ff455e340 generated files 2018-12-19 11:19:12 -05:00
Jordan Liggitt fd9e9b01b1 Remove uses of extensions/v1beta1 clients 2018-12-19 11:18:53 -05:00
k8s-ci-robot 5289fab2f6
Merge pull request #71396 from liggitt/forbidden-messages
Improve node authorizer and noderestriction forbidden messages
2018-11-30 00:04:46 -08:00
soggiest 1ec6672580 Added similar functionality for init containers as standard containers in PodPreset admission controller 2018-11-27 14:31:32 -08:00
Jordan Liggitt 16e355791f Improve node authorizer and noderestriction forbidden messages 2018-11-24 09:31:10 -05:00
Jordan Liggitt 2498ca7606 drop VerifyFeatureGatesUnchanged 2018-11-21 11:51:33 -05:00
k8s-ci-robot ca696fef26
Merge pull request #69848 from mikedanese/projadmission
migrate service account volume to a projected volume when BoundServiceAccountTokenVolumes are enabled
2018-11-16 22:46:23 -08:00
Mike Danese 1244ee6651 migrate service account volume to a projected volume
When BoundServiceAccountTokenVolume feature is enabled.
2018-11-16 19:32:44 +00:00
Jordan Liggitt 733dd9dfd7 Add tests to ensure feature gate changes don't escape kubelet/scheduler packages 2018-11-16 10:52:53 -05:00
Jordan Liggitt de8bf9b63d fix scheduler and kubelet unit tests leaking feature flag changes 2018-11-16 10:52:53 -05:00
Jordan Liggitt 248d661327 Add tests to ensure storage feature gate changes don't escape packages 2018-11-16 10:52:53 -05:00
Jordan Liggitt 358c092abe fix storage unit tests leaking feature flag changes 2018-11-16 10:52:52 -05:00
Michelle Au fd64c08240 Fix storage feature gate test setting 2018-11-16 10:49:40 -05:00