Paulo Gomes
8976e3620f
Add seccomp enforcement and validation based on new GA fields
...
Adds seccomp validation.
This ensures that field and annotation values must match when present.
Co-authored-by: Sascha Grunert <sgrunert@suse.com>
2020-07-06 09:13:25 +01:00
Jordan Liggitt
61774cd717
Plumb context to admission Admit/Validate
2019-08-20 11:11:00 -04:00
Kubernetes Prow Robot
64a2be8e44
Merge pull request #79387 from tedyu/cont-helper-early
...
Restore early return for podSpecHasContainer
2019-07-01 15:09:45 -07:00
Ted Yu
cf7c164ae3
Restore early return for podSpecHasContainer
2019-06-26 14:17:13 +08:00
Lee Verberne
bd5f4117e5
Return all errors in alwayspullimages.Validate()
2019-06-25 18:11:51 +00:00
Lee Verberne
ee821e2a04
Create helpers for iterating containers in a pod
2019-06-21 08:32:04 +00:00
Mehdy Bohlool
d08bc3774d
Mechanical changes due to signature change for Admit and Validate functions
2019-02-16 13:28:47 -08:00
hzxuzhonghu
7c5f9e0bba
refactor admission flag: add two admission flags and make plugins auto in recommended order
2018-01-19 13:16:36 +08:00
Dr. Stefan Schimanski
012b085ac8
pkg/apis/core: mechanical import fixes in dependencies
2017-11-09 12:14:08 +01:00
David Eads
75c448dbc7
make easy validation admission plugins into validators
2017-11-03 07:54:39 -04:00
Dr. Stefan Schimanski
131905cdb8
admission: unify plugin constructors
2017-10-30 16:56:38 +01:00
p0lyn0mial
c5019bf696
remove init blocks from all admission plugins
2017-05-23 22:00:32 +02:00
p0lyn0mial
3f8d6e9210
Change all the existing admission init blocks to call a Register function
...
this is a two stage refactor when done there will be no init block in admission plugins.
Instead all plugins expose Register function which accept admission.Plugins instance.
The registration to global plugin registry happens inside Register func.
2017-05-18 22:25:01 +02:00
Dr. Stefan Schimanski
63f547e1b1
pkg/admission: make plugin registry non-global
2017-04-12 11:37:25 +02:00
deads2k
01b3b2b461
move admission to genericapiserver
2017-01-18 08:15:19 -05:00
deads2k
77b4d55982
mechanical
2017-01-16 09:35:12 -05:00
deads2k
2861509b6d
refactored admission to avoid internal client references
2017-01-03 15:50:12 -05:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
Clayton Coleman
588f15844b
Add init container support to other admission controllers
2016-05-18 22:32:25 -04:00
deads2k
0061479890
fully qualify admission resources and kinds
2016-04-26 07:55:33 -04:00
Chao Xu
184440f8ef
rename release_1_2 to internalclientset
2016-02-05 14:02:28 -08:00
Chao Xu
f9f5736b01
grep sed
2016-02-03 13:06:07 -08:00
Chao Xu
cddd7b56a4
replace client with clientset in kubelet and other places
2016-02-02 20:28:45 -08:00
Andy Goldstein
f175a22443
Add admission controller to force image pulls
...
Add an admission controller that forces every container's image pull policy to
Always when a pod is created.
2015-12-22 10:32:40 -05:00
