k3s/pkg
Kubernetes Submit Queue ae03f22c65 Merge pull request #46009 from timstclair/audit-policy
Automatic merge from submit-queue (batch tested with PRs 45949, 46009, 46320, 46423, 46437)

Implement audit policy logic

Includes https://github.com/kubernetes/kubernetes/pull/45315#discussion_r117115932 (ignore the first commit)

Feature: https://github.com/kubernetes/features/issues/22

Remaining work:

- [x] Load the policy into the `server.Config`
- [x] Rebase on https://github.com/kubernetes/kubernetes/pull/45315
- [x] Establish shared code for audit api scheme (with https://github.com/kubernetes/kubernetes/pull/45919)
- [x] Once https://github.com/kubernetes/kubernetes/pull/45766 is merged, call the policy checker in the audit path

/cc @sttts @soltysh @ericchiang @ihmccreery @pweil- @deads2k
2017-05-25 19:40:59 -07:00
..
api Merge pull request #46305 from sjenning/init-container-status 2017-05-24 14:18:45 -07:00
apimachinery/tests autogenerated 2017-04-14 10:40:57 -07:00
apis Generated changes for collision count 2017-05-25 12:23:17 +02:00
auth Add NodeIdentifier interface and default implementation 2017-05-18 16:43:41 -04:00
bootstrap/api autogenerated 2017-04-14 10:40:57 -07:00
capabilities
client /pkg/client/listers: fix some typo 2017-05-24 13:59:03 +08:00
cloudprovider Merge pull request #45932 from lpabon/elbtag_pr 2017-05-25 11:46:06 -07:00
controller Merge pull request #45003 from krmayankk/garbage 2017-05-25 11:46:08 -07:00
conversion
credentialprovider Merge pull request #45056 from ericchiang/update-oauth2 2017-05-03 19:34:14 -07:00
features Implement audit policy logic 2017-05-25 07:38:07 -07:00
fieldpath autogenerated 2017-04-14 10:40:57 -07:00
fields
generated Merge pull request #45573 from shiywang/zh 2017-05-25 03:13:57 -07:00
hyperkube
kubeapiserver Implement audit policy logic 2017-05-25 07:38:07 -07:00
kubectl Generated changes for collision count 2017-05-25 12:23:17 +02:00
kubelet Merge pull request #45949 from NickrenREN/kubelet-metric 2017-05-25 19:40:58 -07:00
kubemark Make usage of real proxier in hollow-proxy optional (default=true) 2017-05-18 14:30:12 +02:00
labels
master audit: wire through non-nil context everywhere 2017-05-23 11:20:14 +02:00
metrics autogenerated 2017-04-14 10:40:57 -07:00
printers PDB MaxUnavailable: kubectl changes 2017-05-23 07:18:44 -07:00
probe Extend Iptables interface with SaveInto 2017-05-19 20:44:25 +02:00
proxy Use BoundedFrequencyRunner in kube-proxy 2017-05-24 20:33:15 -07:00
quota Moved qos to api.helpers. 2017-05-20 07:17:57 -04:00
registry Merge pull request #46262 from xilabao/fix-message-in-storage-extensions 2017-05-24 14:18:53 -07:00
routes Merge pull request #45490 from deads2k/owners-01-extensions 2017-05-10 12:51:51 -07:00
runtime
security Use dedicated Unix User and Group ID types 2017-05-05 14:07:38 +02:00
securitycontext Use dedicated Unix User and Group ID types 2017-05-05 14:07:38 +02:00
serviceaccount autogenerated 2017-04-14 10:40:57 -07:00
ssh autogenerated 2017-04-14 10:40:57 -07:00
types
util Merge pull request #46266 from thockin/proxy-periodic-runner-2 2017-05-25 06:17:56 -07:00
version autogenerated 2017-04-14 10:40:57 -07:00
volume Merge pull request #45518 from portworx/px-remote 2017-05-25 11:45:59 -07:00
watch autogenerated 2017-04-14 10:40:57 -07:00
BUILD add "admission" API group 2017-05-19 10:17:37 -06:00
OWNERS