Patrick Ohly
99b5b13394
CSI ephemeral volumes: documentation and owner update
...
The promotion to beta missed some code locations. The owner also
changed since the feature was initially designed and implemented.
The "is handled by an external CSI driver" to "by certain external CSI
drivers" change is supposed to avoid the misconception that this
volume type will work with arbitrary CSI drivers.
2020-07-01 09:19:18 +02:00
wangkai1994
8d68452ea0
replace whitelist to allowlist
2020-06-12 10:20:58 +08:00
Andrew Sy Kim
2e56866c97
move apparmor annotation constants to k8s.io/api/core/v1
...
Signed-off-by: Andrew Sy Kim <kim.andrewsy@gmail.com>
2020-04-06 10:22:04 -04:00
Nan Yu
1fb0dd4ec5
Rename PodDisruptionsAllowed to DisruptionsAllowed in type PodDisruptionBudgetStatus
2019-12-03 14:26:35 -08:00
Roy Hvaara
10c8508acd
Fix golint issues in pkg/apis/policy
2019-11-09 21:15:35 +01:00
W. Trevor King
a05cabb3a6
pkg/apis/policy: Fix "informatio" -> "information" comment typo
...
Typo from kubernetes/kubernetes@8e2347370e (Add observedGeneration to
PodDisruptionBudgetStatus, 2016-11-08, kubernetes/kubernetes#36438 ).
2019-10-08 12:27:50 -07:00
Andy Bursavich
030aab29a1
Make API constants constant
2019-09-11 11:04:07 -07:00
Vladimir Vivien
8e0cf65310
Enforce pod security policy for CSI inline
2019-05-29 15:38:21 -04:00
Chao Xu
369314959c
generated
2019-05-24 18:14:53 -07:00
David McCormick
3537eed826
Remove the generation altering code - validate an update for a PDB by running ValidatePodDisruptionBudget only.
2019-05-14 12:25:23 +01:00
David McCormick
5b9e4f1e88
Rebase allow updates to pdbs to latest upstream master
2019-05-14 12:25:22 +01:00
Kubernetes Prow Robot
6a48257627
Merge pull request #73795 from tallclair/runtimeclass-psp
...
PodSecurityPolicy RuntimeClass support
2019-05-02 00:46:17 -07:00
Tim Allclair
952c45f654
RuntimeClass PSP API validation
2019-05-01 13:43:41 -07:00
Tim Allclair
57c6eacdcf
RuntimeClass PSP API generated files
2019-05-01 13:43:36 -07:00
Tim Allclair
821cb155ab
PodSecurityPolicy RuntimeClass API
2019-04-30 16:45:09 -07:00
yue9944882
71a58de48b
clean up genclient tags for hub types
2019-04-24 16:53:21 +08:00
Davanum Srinivas
7b8c9acc09
remove unused code
...
Change-Id: If821920ec8872e326b7d85437ad8d2620807799d
2019-04-19 08:36:31 -04:00
Vladimir Vivien
d998fc8f0f
CSI Inline Volume - Generated files
2019-03-08 12:39:58 -05:00
Vladimir Vivien
4ec7d2305d
CSI Inline Volume - API changes
2019-03-08 12:35:07 -05:00
Kubernetes Prow Robot
3f605a2337
Merge pull request #74285 from mourya007/selinux
...
Adding Selinux test in validation
2019-02-26 14:07:33 -08:00
mourya007
3eada575b3
Adding Selinux test in validation
2019-02-20 11:33:59 +05:30
Kubernetes Prow Robot
808f2cf0ef
Merge pull request #72525 from justinsb/owners_should_not_be_executable
...
Remove executable file permission from OWNERS files
2019-02-14 23:55:45 -08:00
Kubernetes Prow Robot
b50c643be0
Merge pull request #73540 from rlenferink/patch-5
...
Updated OWNERS files to include link to docs
2019-02-08 09:05:56 -08:00
mourya007
90b9808681
Add missing testcases
2019-02-07 11:14:53 +05:30
Roy Lenferink
b43c04452f
Updated OWNERS files to include link to docs
2019-02-04 22:33:12 +01:00
Justin SB
dd19b923b7
Remove executable file permission from OWNERS files
2019-01-11 16:42:59 -08:00
Rajath Agasthya
5de2d7694d
Remove Sysctls feature gate from validation
2019-01-09 18:56:11 -08:00
Jordan Liggitt
cb76da9fd7
Validate PSP allowedProcMountTypes
2018-12-29 00:18:01 -05:00
Jordan Liggitt
35178d352d
auth policy subproject approvers/reviewers
2018-11-06 00:57:39 -05:00
Jordan Liggitt
572dfe6cb7
generated files
2018-10-25 21:12:57 -04:00
Jordan Liggitt
d0577ace6b
fixup extensions->apps references
2018-10-25 21:12:57 -04:00
Slava Semushin
14c969b604
Remove myself from OWNERS files.
2018-10-16 22:47:44 +01:00
Mayank Kumar
bc3e3afc46
api changes for psp runasgroup policy
2018-10-09 17:32:09 -07:00
Stanislav Laznicka
a577b50012
Add "MayRunAs" value among other GroupStrategies
...
Adds "MayRunAs" value among other group strategies. This strategy
allows to define a certain range of GIDs for FSGroupStrategy and
SupplementalGroupStrategy in a PSP.
This new strategy works similarly to the "MustRunAs" one, except that
when no GID is specified in a pod/container security context then no
GID is generated for the respective containers.
Resolves #56173
2018-09-27 12:47:21 +02:00
Jess Frazelle
1a4cf7a36e
make update
...
Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
2018-08-30 18:24:23 -04:00
Jess Frazelle
30dcca6233
ProcMount: add api options and feature gate
...
Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
2018-08-30 11:40:02 -04:00
Kenjiro Nakayama
c0eedf775e
Make DisruptedPods in PodDisruptionBudgetStatus optional field
2018-08-22 21:59:37 +09:00
Di Xu
3157ff0230
use NameIsDNSSubdomain validation from staging
2018-08-14 10:38:23 +08:00
Clayton Coleman
ef561ba8b5
generated: Avoid use of reflect.Call in conversion code paths
2018-07-17 23:02:16 -04:00
Dr. Stefan Schimanski
f8de7cea40
Update generated files
2018-06-29 20:36:17 +02:00
Jeff Grafton
23ceebac22
Run hack/update-bazel.sh
2018-06-22 16:22:57 -07:00
Dr. Stefan Schimanski
1208437f84
Update generated files
2018-06-13 12:35:13 +02:00
Seth Jennings
6729add11c
sysctls: create feature gate to track promotion
2018-06-06 00:23:11 +02:00
Jan Chaloupka
3cc15363bc
Run make update
2018-06-06 00:12:40 +02:00
Jan Chaloupka
ab616a88b9
Promote sysctl annotations to API fields
2018-06-05 23:17:00 +02:00
Josh Horwitz
c7fbcf35da
Add support for enforcing read only host paths in PSPs.
2018-06-04 19:10:37 -04:00
David Eads
c5445d3c56
simplify api registration
2018-05-08 18:33:50 -04:00
David Eads
7b4f97aca3
generated
2018-05-08 18:32:44 -04:00
Slava Semushin
a0c75d028a
Update autogenerated files.
2018-05-04 18:31:42 +02:00
Slava Semushin
f49a0fbd5f
Replace UserIDRange/GroupIDRange by IDRange in internal type to reduce difference with external type.
...
We had IDRange in both types prior 9440a68744
commit that splitted it
into UserIDRange/GroupIDRange. Later, in c91a12d205
commit we had to
revert this changes because they broke backward compatibility but
UserIDRange/GroupIDRange struct left in the internal type.
This commit removes these leftovers and reduces the differences
between internal and external types.
2018-05-04 18:31:42 +02:00