Mike Danese
12125455d8
move authorizers over to new interface
2017-11-03 13:46:28 -07:00
Dr. Stefan Schimanski
ce6ecbbc54
Remove all api.Scheme references by using explicit package aliases
2017-10-30 19:54:02 +01:00
xilabao
f14c138438
add selfsubjectrulesreview api
2017-09-01 19:09:43 +08:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
deads2k
4d7fcae85a
mechanicals
2017-01-05 11:14:27 -05:00
Kubernetes Submit Queue
2db76ad133
Merge pull request #30369 from lixiaobing10051267/masterQuote
...
Automatic merge from submit-queue
check using single quote in cmd/pkg/plugin
2016-08-23 00:19:25 -07:00
Clayton Coleman
5f8366aac3
Convert() should accept the new conversion Context value
...
Allows Convert() to reuse the same conversions as ConvertToVersion
without being overly coupled to the version.
2016-08-18 14:45:20 -04:00
lixiaobing10051267
6cb66b6695
check using single quote in cmd/pkg/plugin
2016-08-10 23:32:09 +08:00
Michal Rostecki
fa0dd46ab7
Return (bool, error) in Authorizer.Authorize()
...
Before this change, Authorize() method was just returning an error,
regardless of whether the user is unauthorized or whether there
is some other unrelated error. Returning boolean with information
about user authorization and error (which should be unrelated to
the authorization) separately will make it easier to debug.
Fixes #27974
2016-07-18 12:06:54 +02:00
deads2k
f6f1ab34aa
authorize based on user.Info
2016-07-14 07:48:42 -04:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Clayton Coleman
4386e8cc38
Change legacy ABAC decode to use new Decoder
...
The new Decode() method is able to deserialize an unknown type when an
explicit Into is provided.
2016-01-22 01:10:23 -05:00
Clayton Coleman
c1d932e44a
Switch API objects to not register per version codecs
...
Remove Codec from versionInterfaces in meta (RESTMapper is now agnostic
to codec and serialization). Register api/latest.Codecs as the codec
factory and use latest.Codecs.LegacyCodec(version) as an equvialent to
the previous codec.
2016-01-22 01:10:21 -05:00
deads2k
f764e0099c
Update ObjectTyper to GroupVersion
2015-12-07 08:35:05 -05:00
Jordan Liggitt
2321651518
Add non-resource and API group support to ABAC authorizer, version ABAC policy rules
2015-12-03 12:31:13 -05:00
Wojciech Tyczynski
53ae56f205
Replace "minion" with "node" in bunch of places.
2015-09-14 11:07:11 +02:00
Mike Danese
8e33cbfa28
rewrite go imports
2015-08-05 17:30:03 -07:00
Eric Paris
6b3a6e6b98
Make copyright ownership statement generic
...
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
deads2k
00fc17e690
abac policy file parsing bug
2015-04-02 11:13:20 -04:00
deads2k
8a2fe9bd2b
modify policy to correctly identify resource versus kind
2015-02-04 13:36:01 -05:00
Jordan Liggitt
9d8d313113
Initial addition of groups to user/policy
2014-12-18 15:33:45 -05:00
Sam Ghods
6399854240
Remove unused YAML tags and GetYAML/SetYAML methods
...
Unneeded after move to ghodss/yaml.
2014-12-02 16:25:28 -08:00
Eric Tune
6e81e8c896
Basic ACL file.
...
Added function to read basic ACL from a CSV file.
Added implementation of Authorize based on that file's policies.
Added docs on authentication and authorization.
Added example file and tested it.
2014-11-05 16:06:22 -08:00