Jordan Liggitt
15bcfd5e00
Prevent nodes from updating taints
2018-05-15 13:54:33 -04:00
Jordan Liggitt
8161033be4
Make node restriction admission pod lookups use an informer
2018-05-10 07:53:46 -04:00
Michael Taufen
c41cf55a2c
explicit kubelet config key in Node.Spec.ConfigSource.ConfigMap
...
This makes the Kubelet config key in the ConfigMap an explicit part of
the API, so we can stop using magic key names.
As part of this change, we are retiring ConfigMapRef for ConfigMap.
2018-05-08 15:37:26 -07:00
Mike Danese
b43cd7307d
noderestriction: restrict nodes TokenRequest permission
...
nodes should only be able to create TokenRequests if:
* token is bound to a pod
* binding has uid and name
* the pod exists
* the pod is running on that node
2018-02-26 13:46:19 -08:00
Cao Shufeng
4e7398b67b
remove duplicated import
2018-01-17 09:34:59 +08:00
Dr. Stefan Schimanski
012b085ac8
pkg/apis/core: mechanical import fixes in dependencies
2017-11-09 12:14:08 +01:00
Michael Taufen
443d58e40a
Dynamic Kubelet Configuration
...
Alpha implementation of the Dynamic Kubelet Configuration feature.
See the proposal doc in #29459 .
2017-08-08 12:21:37 -07:00
Daniel Fernandes Martins
81ba522bbe
Make NodeRestriction admission allow evictions for bounded pods
2017-07-20 14:20:03 -03:00
Jordan Liggitt
fed30040c9
Make NodeRestriction admission require identifiable nodes
2017-05-30 15:15:23 -04:00
Jordan Liggitt
a26897362b
Use name from node object on create
2017-05-19 10:37:14 -04:00
Jordan Liggitt
6fd36792f1
Add NodeRestriction admission plugin
2017-05-18 16:43:42 -04:00
