github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/pkg/volume
History
Kubernetes Submit Queue 60dc2fa5d8 Merge pull request #35675 from liggitt/pv-secrets 
Automatic merge from submit-queue

Require PV provisioner secrets to match type

In 1.5, PV provisioners are allowing targeting namespaced secrets via storageclass params. This adds a requirement that those secrets' type match the volume provisioner plugin name, to prevent targeting and extraction of arbitrary secrets

Helps limit secret targeting issues mentioned in https://github.com/kubernetes/kubernetes/issues/34822
 		2016-10-30 02:41:05 -07:00
..
aws_ebs Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
azure_dd Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
azure_file autogenerated 2016-10-21 17:32:32 -07:00
cephfs autogenerated 2016-10-21 17:32:32 -07:00
cinder Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
configmap autogenerated 2016-10-21 17:32:32 -07:00
downwardapi autogenerated 2016-10-21 17:32:32 -07:00
empty_dir autogenerated 2016-10-21 17:32:32 -07:00
fc autogenerated 2016-10-21 17:32:32 -07:00
flexvolume autogenerated 2016-10-21 17:32:32 -07:00
flocker autogenerated 2016-10-21 17:32:32 -07:00
gce_pd Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
git_repo autogenerated 2016-10-21 17:32:32 -07:00
glusterfs Require PV provisioner secrets to match type 2016-10-27 02:45:05 -04:00
host_path autogenerated 2016-10-21 17:32:32 -07:00
iscsi autogenerated 2016-10-21 17:32:32 -07:00
nfs autogenerated 2016-10-21 17:32:32 -07:00
quobyte Require PV provisioner secrets to match type 2016-10-27 02:45:05 -04:00
rbd Require PV provisioner secrets to match type 2016-10-27 02:45:05 -04:00
secret autogenerated 2016-10-21 17:32:32 -07:00
testing Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
util Merge pull request #35675 from liggitt/pv-secrets 2016-10-30 02:41:05 -07:00
vsphere_volume Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
BUILD autogenerated 2016-10-21 17:32:32 -07:00
OWNERS Update pkg/volume/OWNERS to include Jan Safranek 2016-10-20 12:21:06 -05:00
doc.go Use Go canonical import paths 2016-07-16 13:48:21 -04:00
metrics_cached.go
…
metrics_du.go Disambiguate unsupported metrics from metrics errors 2016-09-15 10:05:30 +10:00
metrics_du_test.go
…
metrics_errors.go Disambiguate unsupported metrics from metrics errors 2016-09-15 10:05:30 +10:00
metrics_nil.go Disambiguate unsupported metrics from metrics errors 2016-09-15 10:05:30 +10:00
metrics_nil_test.go
…
metrics_statfs.go Disambiguate unsupported metrics from metrics errors 2016-09-15 10:05:30 +10:00
plugins.go Pass whole PVC to provisioner plugin 2016-10-12 12:22:01 +02:00
plugins_test.go Print/log pointers of structs with %#v instead of %+v 2016-08-01 22:27:56 +02:00
util.go Rename PetSet API to StatefulSet 2016-10-27 17:25:10 -07:00
util_test.go Send recycle events from pod to pv. 2016-09-08 12:57:57 +02:00
volume.go Add sync state loop in master's volume reconciler 2016-10-28 09:24:53 -07:00
volume_linux.go
…
volume_unsupported.go
…