Mike Danese
0e0f8346e7
sarapprover: increase base delay of per item rate limit
...
from 5 miliseconds to 1 second
2017-11-16 11:27:06 -08:00
Mike Danese
302fe7c0c8
sarapprover: ignore authz errors
2017-11-16 11:27:05 -08:00
supereagle
b694d51842
use versiond group clients from client-go
2017-11-07 14:47:22 +08:00
hzxuzhonghu
ddbbbfceff
remove redundant code
2017-10-27 15:49:08 +08:00
Mike Danese
1181a88cf2
certs: remove always nil error from New signature
2017-10-23 11:43:08 -07:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
Kubernetes Submit Queue
0ba7c52b8c
Merge pull request #53458 from dims/fix-pkg-cmd-dependencies
...
Automatic merge from submit-queue. If you want to cherry-pick this change to another branch, please follow the instructions <a href="https://github.com/kubernetes/community/blob/master/contributors/devel/cherry-picks.md ">here</a>.
Fix pkg/ depends on cmd/ problems
**What this PR does / why we need it**:
**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: fixes #
Partial fix for https://github.com/kubernetes/kubernetes/issues/53341
**Special notes for your reviewer**:
No logic changes, Just moving things around
**Release note**:
```release-note
NONE
```
2017-10-13 23:56:55 -07:00
Davanum Srinivas
6d5e1d2bea
Drop cmd/gke-certificates-controller from bazel build script
2017-10-13 07:06:21 -04:00
Jacob Simpson
2a6099b8f9
New controller to GC CSRs.
2017-10-04 14:45:32 -07:00
Dr. Stefan Schimanski
1d053c4f7c
controllers: simplify deepcopy calls
2017-08-29 19:21:24 +02:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Kubernetes Submit Queue
319bef285a
Merge pull request #49788 from mikedanese/resync-csr
...
Automatic merge from submit-queue (batch tested with PRs 49615, 49321, 49982, 49788, 50355)
csr: add resync to csr approver
fixes https://github.com/kubernetes/kubernetes/issues/49787
```release-note
Fix an issue where if a CSR is not approved initially by the SAR approver is not retried.
```
2017-08-09 23:56:05 -07:00
Mike Danese
cb56558531
csr: add resync to csr approver
2017-08-09 11:47:08 -07:00
Davanum Srinivas
9a761b16c1
Add missing UID in SubjectAccessReviewSpec
...
WebhookAuthorizer's Authorize should send *all* the information
present in the user.Info data structure. We are not sending the
UID currently.
2017-08-02 10:49:02 -04:00
Jacob Simpson
29c1b81d4c
Scripted migration from clientset_generated to client-go.
2017-07-17 15:05:37 -07:00
Chao Xu
60604f8818
run hack/update-all
2017-06-22 11:31:03 -07:00
Chao Xu
cde4772928
run ./root-rewrite-all-other-apis.sh, then run make all, pkg/... compiles
2017-06-22 11:30:52 -07:00
Jacob Simpson
334de1cbe1
Auto approve kubelet certificate signing requests.
2017-06-16 08:47:12 -07:00
Slava Semushin
418cf3710c
Improve error reporting by including file name in the message.
2017-06-06 17:47:11 +02:00
Mike Danese
66b4b99616
migrate group approver to use subject access reviews
2017-05-30 11:43:03 -07:00
Kubernetes Submit Queue
b7ebdfa978
Merge pull request #46383 from mikedanese/fix-flake
...
Automatic merge from submit-queue (batch tested with PRs 46383, 45645, 45923, 44884, 46294)
fix certificates flake
Fixes https://github.com/kubernetes/kubernetes/issues/46365
Fixes https://github.com/kubernetes/kubernetes/issues/46374
2017-05-26 12:57:58 -07:00
Mike Danese
bbe1e9caa4
fix certificates flake
2017-05-26 11:03:45 -07:00
Jacob Simpson
07e9b0e197
Add support for specifying certificate duration at runtime.
2017-05-24 13:29:46 -07:00
Mike Danese
f04ce3cfba
refactor certificate controller
2017-05-23 15:25:58 -07:00
Chao Xu
958903509c
bazel
2017-04-27 09:41:53 -07:00
Chao Xu
3fa7b7824a
easy changes
2017-04-27 09:41:53 -07:00
Mike Danese
a05c3c0efd
autogenerated
2017-04-14 10:40:57 -07:00
Andy Goldstein
e63fcf708d
Make controller Run methods consistent
...
- startup/shutdown logging
- wait for cache sync logging
- defer utilruntime.HandleCrash()
- wait for stop channel before exiting
2017-04-14 07:27:45 -04:00
deads2k
fd34b11e13
react to informer updates
2017-02-13 09:18:32 -05:00
deads2k
a86fabb9d2
regenerate informers
2017-02-13 07:59:34 -05:00
Jacob Beacham
7682aa53b1
Allow the CertificateController to use any Signer implementation.
...
This will allow developers to create CertificateControllers with
arbitrary Signers, instead of forcing the use of CFSSLSigner.
2017-02-10 14:26:45 -08:00
Andy Goldstein
e5fc73a4f1
Switch CSR controller to use shared informer
2017-02-08 11:01:34 -05:00
Mike Danese
e34351f715
refactor approver and signer interfaces to be consisten w.r.t. apiserver interaction
...
This makes it so that only the controller loop talks to the
API server directly. The signatures for Sign and Approve also
become more consistent, while allowing the Signer to report
conditions (which it wasn't able to do before).
2017-02-02 11:23:52 -08:00
deads2k
8a12000402
move client/record
2017-01-31 19:14:13 -05:00
deads2k
2c1c0f3f72
move workqueue to client-go
2017-01-30 09:08:21 -05:00
deads2k
b0b156b381
make tools/cache authoritative
2017-01-25 08:29:45 -05:00
deads2k
5a8f075197
move authoritative client-go utils out of pkg
2017-01-24 08:59:18 -05:00
Clayton Coleman
9009c1ac14
generated: informer,client
2017-01-23 17:52:47 -05:00
Clayton Coleman
469df12038
refactor: move ListOptions references to metav1
2017-01-23 17:52:46 -05:00
deads2k
1ce0637b27
move listers out of cache to reduce import tree
2017-01-20 15:01:38 -05:00
deads2k
ee6752ef20
find and replace
2017-01-20 08:04:53 -05:00
Mike Danese
44b7246568
autogenerated
2017-01-19 14:24:45 -08:00
Mike Danese
96c146c8f2
promote certificates.k8s.io to beta
2017-01-19 13:13:20 -08:00
Dr. Stefan Schimanski
918868b115
genericapiserver: cut off certificates api dependency
2017-01-16 14:10:59 +01:00
Klaus Ma
25fe1e0d82
Made cache.Controller to be interface.
2017-01-13 13:33:23 +08:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
Mike Danese
d2032fd83c
kubelet: request client auth certificates from certificate API.
2017-01-10 17:57:39 -08:00
Mike Danese
bc52211304
add unit tests for the signer
2017-01-09 14:00:08 -08:00
Mike Danese
19871dfb28
autogenerated
2017-01-09 13:24:28 -08:00