Taahir Ahmed
6a75e7c40c
ClusterTrustBundles: Define types
...
This commit is the main API piece of KEP-3257 (ClusterTrustBundles).
This commit:
* Adds the certificates.k8s.io/v1alpha1 API group
* Adds the ClusterTrustBundle type.
* Registers the new type in kube-apiserver.
* Implements the type-specfic validation specified for
ClusterTrustBundles:
- spec.pemTrustAnchors must always be non-empty.
- spec.signerName must be either empty or a valid signer name.
- Changing spec.signerName is disallowed.
* Implements the "attest" admission check to restrict actions on
ClusterTrustBundles that include a signer name.
Because it wasn't specified in the KEP, I chose to make attempts to
update the signer name be validation errors, rather than silently
ignored.
I have tested this out by launching these changes in kind and
manipulating ClusterTrustBundle objects in the resulting cluster using
kubectl.
2023-03-15 20:10:18 -07:00
David Eads
a59b92e8c0
reduce API surface area of whether a resource is enabled
2022-02-23 13:36:33 -05:00
David Eads
132fbf4192
convert rest storage to per-resource
2022-02-16 14:19:29 -05:00
Jordan Liggitt
39a1293cbc
Drop beta REST APIs removed in 1.22
2021-08-09 11:10:16 -04:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
Jordan Liggitt
a504445086
Generated files
...
Change-Id: I598d686849f4b97846757b227f5191bac031798b
2020-06-05 04:58:14 +00:00
Jordan Liggitt
e0f5cca410
Copy CSR v1beta1 to v1
...
* Remove prerelease tags
* Update copyright, package, imports to v1
* Remove signerName, usages, and condition status defaulting
2020-06-05 00:47:24 -04:00
Ted Yu
87b2a3129b
Propagate error from NewREST
2019-08-12 13:55:35 -07:00
Jeff Grafton
23ceebac22
Run hack/update-bazel.sh
2018-06-22 16:22:57 -07:00
David Eads
c5445d3c56
simplify api registration
2018-05-08 18:33:50 -04:00
David Eads
a89291a5de
stop duplicating preferred version order
2018-04-26 10:03:36 -04:00
hzxuzhonghu
d0d1e1dcc4
refactor resource_config.go thoroughly and remove useless code in registry
2018-01-27 16:10:58 +08:00
Dr. Stefan Schimanski
cad0364e73
Update bazel
2017-10-18 17:24:04 +02:00
Dr. Stefan Schimanski
7773a30f67
pkg/api/legacyscheme: fixup imports
2017-10-18 17:23:55 +02:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Chao Xu
60604f8818
run hack/update-all
2017-06-22 11:31:03 -07:00
Chao Xu
cde4772928
run ./root-rewrite-all-other-apis.sh, then run make all, pkg/... compiles
2017-06-22 11:30:52 -07:00
deads2k
963c85e1c8
sort current API versions and fallback for others
2017-06-14 09:29:44 -04:00
Mike Danese
a05c3c0efd
autogenerated
2017-04-14 10:40:57 -07:00
Dr. Stefan Schimanski
0e9c1f75bf
Update bazel
2017-02-15 10:25:15 +01:00
Dr. Stefan Schimanski
27e01b5c46
k8s.io/apiserver: fixup imports and renamed packages
2017-02-15 10:24:58 +01:00
Dr. Stefan Schimanski
6af3210d6f
Update generated files
2017-02-03 08:15:46 +01:00
Dr. Stefan Schimanski
536460e1d9
Mechanical fixup imports: pkg/genericapiserver
2017-02-03 08:15:45 +01:00
Dr. Stefan Schimanski
de2eee391a
Update bazel
2017-02-02 15:19:04 +01:00
Dr. Stefan Schimanski
bfe0d50ce8
pkg/genericapiserver/server: cut off from pkg/api
2017-02-02 15:19:01 +01:00
Mike Danese
44b7246568
autogenerated
2017-01-19 14:24:45 -08:00
Mike Danese
96c146c8f2
promote certificates.k8s.io to beta
2017-01-19 13:13:20 -08:00
Dr. Stefan Schimanski
3d9449a353
genericapiserver: fix imports
2017-01-19 13:06:47 +01:00
Dr. Stefan Schimanski
8fe0958ba0
Update bazel
2017-01-17 09:30:48 +01:00
Dr. Stefan Schimanski
5c88b7d05a
Fix imports
2017-01-17 09:30:30 +01:00
Timothy St. Clair
fbc5323dad
Refactor registry to use store vs. etcd
2017-01-12 09:23:38 -06:00
Jeff Grafton
20d221f75c
Enable auto-generating sources rules
2017-01-05 14:14:13 -08:00
Mike Danese
c87de85347
autoupdate BUILD files
2016-12-12 13:30:07 -08:00
Monis Khan
a6bafbacbf
Refactor REST storage to use generic defaults
...
Signed-off-by: Monis Khan <mkhan@redhat.com>
2016-12-08 17:24:21 -05:00
Dr. Stefan Schimanski
b2b0142b6f
Update bazel
2016-12-03 18:35:18 +01:00
Dr. Stefan Schimanski
1f5511b131
Move RESTStorageProvider interface into pkg/master
2016-12-03 18:35:15 +01:00
deads2k
7e65d5693b
remove non-reuseable bits of MasterServer
2016-10-31 08:50:05 -04:00
Mike Danese
3b6a067afc
autogenerated
2016-10-21 17:32:32 -07:00
deads2k
17a21c7bdb
move reststorage providers to their correct packages
2016-09-23 16:24:48 -04:00
