github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
115,151 Commits 1 Branch 31 Tags 1,019 MiB
main
Commit Graph

85 Commits

Author SHA1 Message Date
Christopher M. Luciano
912f05bafb
ingress: add alternate resource backend 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-05 16:08:44 -05:00
Christopher M. Luciano
e931e30647
ingress: allow wildcard hosts in IngressRule 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-05 13:44:48 -05:00
Rob Scott
f38904d6f4
Adding PathType to Ingress 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-03 11:11:16 -08:00
Rob Scott
132d2afca0
Adding IngressClass to networking/v1beta1 
Co-authored-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2020-03-01 18:17:09 -08:00
Quan Tian
ea693833c8 Validate Except of IPBlock for NetworkPolicy spec 
This patch enhances the validation of Except field that the values will
be rejected if they are not strictly within the CIDR range.
 2020-02-05 01:35:44 +08:00
Kubernetes Prow Robot
5cb1ec5fea
Merge pull request #86298 from aojea/netpolicyv6 
networkPolicy ipv6 unit tests validation
 2019-12-18 10:37:57 -08:00
Antonio Ojea
f401d711aa
networkPolicy validation ipv6 unit tests 
Add ipv6 cases to the validation unit tests.
 2019-12-16 08:46:53 +01:00
Quan Tian
d07dd4bbed Fix NetworkPolicy PolicyTypes validation 
The validation had an excess nested loop and also caused wrong
error feedback that all policyTypes input will be reported as
unsupported if any of them is wrong.
 2019-11-29 16:02:38 +08:00
Andrew Kim
c919139245 update import of generic featuregate code from k8s.io/apiserver/pkg/util/feature -> k8s.io/component-base/featuregate 2019-05-08 10:01:50 -04:00
Jordan Liggitt
47cb9559be Move internal Ingress type from extensions to networking 2019-02-20 16:41:12 -05:00
Jordan Liggitt
34ac165a44 Move conditional validation for SCTPSupport to validation functions with knowledge of old objects 2019-02-05 23:09:31 -05:00
Laszlo Janosi
ebc16c31af bazel definition updated for pkg/apis/networking/validation/ 2018-08-27 05:59:50 +00:00
Laszlo Janosi
cbe94df8c6 gofmt update 2018-08-27 05:59:50 +00:00
Laszlo Janosi
e466bdc67e Changes according to the approved KEP. SCTP is supported for HostPort and LoadBalancer. Alpha feature flag SCTPSupport controls the support of SCTP. Kube-proxy config parameter is removed. 2018-08-27 05:58:36 +00:00
Laszlo Janosi
a6da2b1472 K8s SCTP support implementation for the first pull request 
The requested Service Protocol is checked against the supported protocols of GCE Internal LB. The supported protocols are TCP and UDP.

SCTP is not supported by OpenStack LBaaS. If SCTP is requested in a Service with type=LoadBalancer, the request is rejected. Comment style is also corrected.

SCTP is not allowed for LoadBalancer Service and for HostPort. Kube-proxy can be configured not to start listening on the host port for SCTP: see the new SCTPUserSpaceNode parameter

changed the vendor github.com/nokia/sctp to github.com/ishidawataru/sctp. I.e. from now on we use the upstream version.

netexec.go compilation fixed. Various test cases fixed

SCTP related conformance tests removed. Netexec's pod definition and Dockerfile are updated to expose the new SCTP port(8082)

SCTP related e2e test cases are removed as the e2e test systems do not support SCTP

sctp related firewall config is removed from cluster/gce/util.sh. Variable name sctp_addr is corrected to sctpAddr in pkg/proxy/ipvs/proxier.go

cluster/gce/util.sh is copied from master
 2018-08-27 05:56:27 +00:00
Di Xu
3157ff0230 use NameIsDNSSubdomain validation from staging 2018-08-14 10:38:23 +08:00
Jeff Grafton
23ceebac22 Run hack/update-bazel.sh 2018-06-22 16:22:57 -07:00
Dan Winship
329639e9f6 Allow including both podSelector and namespaceSelector in a NetworkPolicyPeer 2018-02-26 14:59:56 -05:00
Dan Winship
50b2b30526 Factor out duplicated NetworkPolicy validation code 2018-02-26 14:54:28 -05:00
Jeff Grafton
ef56a8d6bb Autogenerated: hack/update-bazel.sh 2018-02-16 13:43:01 -08:00
Jeff Grafton
efee0704c6 Autogenerate BUILD files 2017-12-23 13:12:11 -08:00
xiangpengzhao
f903b7a85c Validate podCIDR of node spec. 2017-11-13 15:42:07 +08:00
Dr. Stefan Schimanski
bec617f3cc Update generated files 2017-11-09 12:14:08 +01:00
Dr. Stefan Schimanski
012b085ac8 pkg/apis/core: mechanical import fixes in dependencies 2017-11-09 12:14:08 +01:00
xiangpengzhao
b0ebcaf8f0 Add unit test coverage for network policy validation. 2017-11-01 22:01:22 +08:00
Jeff Grafton
aee5f457db update BUILD files 2017-10-15 18:18:13 -07:00
Christopher M. Luciano
84290ce35c
EgressRule generated code 2017-09-05 12:48:55 -04:00
Christopher M. Luciano
90b139897e
Add PolicyTypes to NetworkPolicy Spec 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2017-09-05 12:16:19 -04:00
Christopher M. Luciano
b03302f905
Add EgressRule to NetworkPolicy 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2017-09-05 12:01:07 -04:00
Christopher M. Luciano
b75dc93dd4
Add IPBlock to NetworkPolicy 
Signed-off-by: Christopher M. Luciano <cmluciano@us.ibm.com>
 2017-08-24 16:20:04 -04:00
Jeff Grafton
a7f49c906d Use buildozer to delete licenses() rules except under third_party/ 2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be Use buildozer to remove deprecated automanaged tags 2017-08-11 09:31:50 -07:00
Dan Winship
c03a6ecca0 Allow NetworkPolicy.spec updates 2017-06-07 09:49:43 -04:00
Dan Winship
0923f860f1 Regenerate files 2017-05-28 10:11:02 -04:00
Dan Winship
0683e55fc1 Add networking.k8s.io v1 API, with NetworkPolicy 2017-05-28 10:11:01 -04:00