Dr. Stefan Schimanski
b4c6a68036
Unify genericapiserver Config.New() and master Config.New()
2016-09-28 19:19:54 +02:00
deads2k
b330b0a220
start creating controller SA roles. start with just one
2016-09-26 09:31:36 -04:00
deads2k
a2a6423574
separate RESTStorage by API group
2016-09-20 08:00:50 -04:00
deads2k
7d1f13d3e0
add GenericAPIServer posthooks for initialization
2016-09-19 14:58:27 -04:00
deads2k
8fac64b43f
add localSAR
2016-09-13 08:54:23 -04:00
deads2k
8c788233e7
change rbac roleref type
2016-09-09 09:55:51 -04:00
deads2k
97529e3687
add selfsubjectaccessreview API
2016-08-29 09:51:54 -04:00
Eric Chiang
b4eaf625a0
pkg/genericapiserver/options: don't import pkg/apiserver
...
Refactor the authorization options for the API server so
pkg/apiserver isn't directly imported by the options package.
2016-08-18 13:01:50 -07:00
Hongchao Deng
d0938094d9
move new etcd storage into cacher
2016-08-12 18:40:20 -07:00
deads2k
32920b5617
add subjectaccessreviews resource
2016-08-05 11:20:56 -04:00
deads2k
60dd4a5d26
interesting changes to add tokenreviews endpoint to implement webhook
2016-08-03 08:37:45 -04:00
deads2k
aa3db4d995
make the resource prefix in etcd configurable for cohabitation
2016-07-27 07:51:40 -04:00
Wojciech Tyczynski
4d0d115690
Revert "add tokenreviews endpoint to implement webhook"
2016-07-21 09:40:35 +02:00
deads2k
2c4a9f2e8d
interesting changes to add tokenreviews endpoint to implement webhook
2016-07-20 15:11:56 -04:00
Michal Rostecki
fa0dd46ab7
Return (bool, error) in Authorizer.Authorize()
...
Before this change, Authorize() method was just returning an error,
regardless of whether the user is unauthorized or whether there
is some other unrelated error. Returning boolean with information
about user authorization and error (which should be unrelated to
the authorization) separately will make it easier to debug.
Fixes #27974
2016-07-18 12:06:54 +02:00
deads2k
f6f1ab34aa
authorize based on user.Info
2016-07-14 07:48:42 -04:00
Mike Danese
f3de21bdf0
move integration tests into individual pacakges
...
Signed-off-by: Mike Danese <mikedanese@google.com>
2016-07-07 00:54:15 -07:00
