xilabao
2a77353164
extend err info when authorize failed
2016-12-22 14:47:56 +08:00
Antoine Pelisse
dac49039e8
Update OWNERS approvers and reviewers: pkg/apiserver
2016-12-19 16:20:52 -08:00
Maciej Szulik
cdec94523e
Remove extensions/v1beta1 Job - generated changes
2016-12-17 00:07:25 +01:00
Maciej Szulik
9f064c57ce
Remove extensions/v1beta1 Job
2016-12-17 00:07:24 +01:00
Brendan Burns
43251c92e1
Add 'X-Content-Type-Options: nosniff" to some error messages
2016-12-14 22:01:43 -08:00
Kubernetes Submit Queue
b1acd15046
Merge pull request #38699 from deads2k/auth-07-better-message
...
Automatic merge from submit-queue (batch tested with PRs 38724, 38699)
improve the forbidden message
Improves the forbidden message to include more details about what was denied.
`User "foo" cannot list replicasets.extensions in the namespace "default". `
`User "foo" cannot list replicasets.extensions at the cluster scope. `
@xilabao looks like you looking in a similar area, but focused on errors.
@sttts a lot of usual reviewers are out.
2016-12-14 08:21:48 -08:00
deads2k
f6829bbde7
improve the forbidden message
2016-12-14 09:53:55 -05:00
deads2k
9676fe9948
prevent audit filter from panic-ing on missing user info
2016-12-13 13:32:41 -05:00
Mike Danese
c87de85347
autoupdate BUILD files
2016-12-12 13:30:07 -08:00
deads2k
fc46c31bc2
simplify the authorization attribute getter
2016-12-02 16:19:12 -05:00
Kubernetes Submit Queue
0a976f5356
Merge pull request #37102 from deads2k/api-45-audit-groups
...
Automatic merge from submit-queue
add groups to the audit trail
Adds groups to the string that gets put in the audit log.
@soltysh @sttts
2016-12-02 08:45:04 -08:00
deads2k
503de32094
add groups to the audit trail
2016-11-22 08:40:02 -05:00
deads2k
e69d0d84a4
clear impersonation headers
2016-11-14 15:18:48 -05:00
Mike Danese
3b6a067afc
autogenerated
2016-10-21 17:32:32 -07:00
deads2k
a8b471491b
you can be authorized and have a failure
2016-10-14 16:18:23 -04:00
Kubernetes Submit Queue
617fa91264
Merge pull request #34098 from deads2k/sttts-handlerchain
...
Automatic merge from submit-queue
Customizable genericapiserver handler chain
Rebase of https://github.com/kubernetes/kubernetes/pull/33662 . This is @sttts, but I rebased it for him since he's out this week.
2016-10-05 09:45:57 -07:00
Dr. Stefan Schimanski
7cfd0150e4
Turn RequestInfoResolver into a RequestInfoFactory
2016-10-05 10:32:36 -04:00
Maciej Szulik
9cc2a0454d
Add asgroups to audit log
2016-10-05 15:40:11 +02:00
Dr. Stefan Schimanski
6c75e922f3
Decouple NewRequestInfoResolver from GenericApiServer instance
2016-09-28 18:51:34 +02:00
Dr. Stefan Schimanski
10cbaf7ce0
Store RequestInfo in Context
...
... in order to replace the manual RequestInfoResolver dependency injection
through out the code.
2016-09-28 18:51:34 +02:00
Dr. Stefan Schimanski
6dc2f6337b
Separate apiserver handler filters
2016-09-27 09:57:59 +02:00
