carlory
f6bb24129e
fix static check failures
2019-10-10 22:59:09 +08:00
Jordan Liggitt
61774cd717
Plumb context to admission Admit/Validate
2019-08-20 11:11:00 -04:00
Joe Betz
900d652a9a
Update tests for: Pass {Operation}Option to Webhooks
2019-05-14 10:49:43 -07:00
Mehdy Bohlool
d08bc3774d
Mechanical changes due to signature change for Admit and Validate functions
2019-02-16 13:28:47 -08:00
Christoph Blecker
97b2992dc1
Update gofmt for go1.11
2018-10-05 12:59:38 -07:00
Wilfried Teiken
73c522f79c
Allow ImageReview backend to add audit annotations.
...
This can be used to create annotations that will allow auditing of the created
pods.
The change also introduces "fail open" audit annotations in addition to the
previously existing pod annotation for fail open. The pod annotations for
fail open will be deprecated soon.
2018-08-23 22:53:06 -04:00
jennybuckley
adafb1365e
Support dry run in admission plugins
2018-08-06 10:37:44 -07:00
Dr. Stefan Schimanski
012b085ac8
pkg/apis/core: mechanical import fixes in dependencies
2017-11-09 12:14:08 +01:00
David Eads
75c448dbc7
make easy validation admission plugins into validators
2017-11-03 07:54:39 -04:00
Dr. Stefan Schimanski
131905cdb8
admission: unify plugin constructors
2017-10-30 16:56:38 +01:00
lichuqiang
d59368906a
fix bug in admission test
2017-08-28 16:18:50 +08:00
Chao Xu
60604f8818
run hack/update-all
2017-06-22 11:31:03 -07:00
Chao Xu
cde4772928
run ./root-rewrite-all-other-apis.sh, then run make all, pkg/... compiles
2017-06-22 11:30:52 -07:00
deads2k
cdb2934bbc
remove kubernetes copy of clientcmd types
2017-01-19 07:39:19 -05:00
deads2k
01b3b2b461
move admission to genericapiserver
2017-01-18 08:15:19 -05:00
deads2k
ca58ec0237
mechanical changes for move
2017-01-04 10:27:05 -05:00
deads2k
2861509b6d
refactored admission to avoid internal client references
2017-01-03 15:50:12 -05:00
Piotr Skamruk
dc3674c8d0
Ensure that we are closing files.
2016-09-12 09:33:24 +02:00
Clayton Coleman
06cbb29e9e
ClientConfig should not default to http://localhost:8080
...
This changes clientcmd to skip the default cluster, but preserves the
behavior in kubectl. This prevents the possibility of an administrator
misconfiguration in kubelet or other server component from allowing a
third party who can bind to 8080 on that host from potentially
impersonating an API server and gaining root access.
2016-08-30 10:43:24 -04:00
Evan Cordell
711e3cff98
Add new admission controller: image policy webhook
2016-08-18 21:59:45 -04:00
