Mike Danese
b43cd7307d
noderestriction: restrict nodes TokenRequest permission
...
nodes should only be able to create TokenRequests if:
* token is bound to a pod
* binding has uid and name
* the pod exists
* the pod is running on that node
2018-02-26 13:46:19 -08:00
Hemant Kumar
1b76b0b2ff
Allow node to update PVC's status
...
Implement node policy feature gates
Add tests for node policy update
2017-11-22 14:32:50 -05:00
Dr. Stefan Schimanski
012b085ac8
pkg/apis/core: mechanical import fixes in dependencies
2017-11-09 12:14:08 +01:00
Dr. Stefan Schimanski
aedcf681b3
admission: rename Validate{ -> Initialization}, Validat{ingAdmit -> e}
2017-11-02 09:29:55 +01:00
Michael Taufen
443d58e40a
Dynamic Kubelet Configuration
...
Alpha implementation of the Dynamic Kubelet Configuration feature.
See the proposal doc in #29459 .
2017-08-08 12:21:37 -07:00
Daniel Fernandes Martins
81ba522bbe
Make NodeRestriction admission allow evictions for bounded pods
2017-07-20 14:20:03 -03:00
Jordan Liggitt
e3e25df5df
Improve node restriction message
2017-07-10 22:44:24 -04:00
Jordan Liggitt
2106a2bbe5
Check live pod on cache miss before forbidding node deletion
2017-06-05 12:09:15 -04:00
Jordan Liggitt
fed30040c9
Make NodeRestriction admission require identifiable nodes
2017-05-30 15:15:23 -04:00
p0lyn0mial
c5019bf696
remove init blocks from all admission plugins
2017-05-23 22:00:32 +02:00
Jordan Liggitt
a26897362b
Use name from node object on create
2017-05-19 10:37:14 -04:00
Jordan Liggitt
6fd36792f1
Add NodeRestriction admission plugin
2017-05-18 16:43:42 -04:00
