wangyysde
|
ab66a38194
|
PodSecurity: promote config and feature gate to GA
Signed-off-by: wangyysde <net_use@bzhy.com>
|
2022-06-15 09:29:47 +08:00 |
|
Tim Allclair
|
bdebc62d49
|
Don't add audit annotations directly to the audit event
|
2022-03-28 17:03:53 -07:00 |
|
Jordan Liggitt
|
1bff65e6f8
|
PodSecurity: benchmark large numbers of owned pods
|
2021-11-02 08:43:27 -04:00 |
|
Tim Allclair
|
6c273020d3
|
[PodSecurity] Avoid the LegcayRegistry for metrics serving
|
2021-11-01 14:23:00 -07:00 |
|
Tim Allclair
|
e46928c0b1
|
[PodSecurity] Fix up metrics & add tests
Update pod security metrics to match the spec in the KEP.
|
2021-11-01 14:11:19 -07:00 |
|
Alkaid
|
ae9ca48f01
|
[PodSecurity] Implement metricRecorder for admission (#104217)
* init
Signed-off-by: jyz0309 <45495947@qq.com>
go fmt
Signed-off-by: jyz0309 <45495947@qq.com>
remove useless code
Signed-off-by: jyz0309 <45495947@qq.com>
add metrics.Attributes interface
Signed-off-by: jyz0309 <45495947@qq.com>
address comment
Signed-off-by: jyz0309 <45495947@qq.com>
go fmt code
Signed-off-by: jyz0309 <45495947@qq.com>
resolve import cycle
Signed-off-by: jyz0309 <45495947@qq.com>
fix comment
Signed-off-by: jyz0309 <45495947@qq.com>
fix lints
Signed-off-by: jyz0309 <45495947@qq.com>
fix build error
Signed-off-by: jyz0309 <45495947@qq.com>
fix test
Signed-off-by: jyz0309 <45495947@qq.com>
try
Signed-off-by: jyz0309 <45495947@qq.com>
* try to compare version
Signed-off-by: jyz0309 <45495947@qq.com>
fix conflict
Signed-off-by: jyz0309 <45495947@qq.com>
remove unuse change
Signed-off-by: jyz0309 <45495947@qq.com>
* address comment
Signed-off-by: jyz0309 <45495947@qq.com>
* fix import error
Signed-off-by: jyz0309 <45495947@qq.com>
fix import
Signed-off-by: jyz0309 <45495947@qq.com>
address comment
Signed-off-by: jyz0309 <45495947@qq.com>
address comment
Signed-off-by: jyz0309 <45495947@qq.com>
* address comment
Signed-off-by: jyz0309 <45495947@qq.com>
* format code
Signed-off-by: jyz0309 <45495947@qq.com>
* remove exempt and error record
Signed-off-by: jyz0309 <45495947@qq.com>
* ignore pod
Signed-off-by: jyz0309 <45495947@qq.com>
* add decision default value
Signed-off-by: jyz0309 <45495947@qq.com>
* address comment
Signed-off-by: jyz0309 <45495947@qq.com>
* remore useless import
Signed-off-by: jyz0309 <45495947@qq.com>
* remove policy vaild check
Signed-off-by: jyz0309 <45495947@qq.com>
use init to register metric
Signed-off-by: jyz0309 <45495947@qq.com>
fix test
Signed-off-by: jyz0309 <45495947@qq.com>
remove check
Signed-off-by: jyz0309 <45495947@qq.com>
remove blank line
Signed-off-by: jyz0309 <45495947@qq.com>
add allowedImports
Signed-off-by: jyz0309 <45495947@qq.com>
Add mock recorder
Signed-off-by: jyz0309 <45495947@qq.com>
format code
Signed-off-by: jyz0309 <45495947@qq.com>
separe record into 3 function
Signed-off-by: jyz0309 <45495947@qq.com>
* fix comment
Signed-off-by: jyz0309 <45495947@qq.com>
|
2021-10-20 20:02:08 -07:00 |
|
Jordan Liggitt
|
77d65dca44
|
PodSecurity: add namespace update verify benchmark
|
2021-10-04 12:26:30 -04:00 |
|
Jordan Liggitt
|
13e0887c4c
|
PodSecurity: add admission benchmark
go test ./plugin/pkg/admission/security/podsecurity -bench /pod -benchmem
goos: darwin
goarch: amd64
pkg: k8s.io/kubernetes/plugin/pkg/admission/security/podsecurity
cpu: Intel(R) Core(TM) i7-9750H CPU @ 2.60GHz
BenchmarkVerifyPod/enforce-implicit_pod-12 702789 1585 ns/op 2120 B/op 12 allocs/op
BenchmarkVerifyPod/enforce-privileged_pod-12 737588 1607 ns/op 2120 B/op 12 allocs/op
BenchmarkVerifyPod/enforce-baseline_pod-12 409818 2974 ns/op 3368 B/op 17 allocs/op
BenchmarkVerifyPod/enforce-restricted_pod-12 370262 3385 ns/op 3368 B/op 17 allocs/op
BenchmarkVerifyPod/warn-baseline_pod-12 391808 3101 ns/op 3368 B/op 17 allocs/op
BenchmarkVerifyPod/warn-restricted_pod-12 349411 3452 ns/op 3368 B/op 17 allocs/op
BenchmarkVerifyPod/enforce-warn-audit-baseline_pod-12 208221 5735 ns/op 5864 B/op 27 allocs/op
BenchmarkVerifyPod/warn-baseline-audit-restricted_pod-12 249662 4849 ns/op 4616 B/op 22 allocs/op
PASS
ok k8s.io/kubernetes/plugin/pkg/admission/security/podsecurity 10.707s
|
2021-09-21 16:20:11 -04:00 |
|
Jordan Liggitt
|
1dfacd3c70
|
PodSecurity: use code/reason/details from admission library
|
2021-07-07 16:25:16 -04:00 |
|
Tim Allclair
|
cf6ba6096f
|
Move pod-security-admission to an external Attributes interface
|
2021-07-06 15:15:15 -07:00 |
|
Jordan Liggitt
|
f39bddd767
|
PodSecurity: kube-apiserver: admission wiring
|
2021-06-28 17:45:35 -04:00 |
|