David Eads
092714ea0f
switch rbac to external
2018-05-22 08:17:05 -04:00
wojtekt
f344c5c062
Requires single name for list and watch
2018-05-15 14:19:21 +02:00
Jordan Liggitt
ff8cdabfd4
Maintain index of high-cardinality edges in node authorizer graph
2018-05-02 16:05:28 -04:00
Michael Taufen
ab8dc12333
node authorizer sets up access rules for dynamic config
...
This PR makes the node authorizer automatically set up access rules for
dynamic Kubelet config.
I also added some validation to the node strategy, which I discovered we
were missing while writing this.
2018-03-27 08:49:45 -07:00
Mike Danese
2cc75f0a5a
auth: allow nodes to create tokones for svcaccts of pods
...
running on them.
2018-02-26 13:46:19 -08:00
Jordan Liggitt
ecfd18e2a6
Add get volumeattachments support to Node authorizer
2018-01-17 00:00:18 -05:00
Hemant Kumar
1b76b0b2ff
Allow node to update PVC's status
...
Implement node policy feature gates
Add tests for node policy update
2017-11-22 14:32:50 -05:00
Dr. Stefan Schimanski
012b085ac8
pkg/apis/core: mechanical import fixes in dependencies
2017-11-09 12:14:08 +01:00
Mike Danese
12125455d8
move authorizers over to new interface
2017-11-03 13:46:28 -07:00
Justin Santa Barbara
bc66c6187c
Fix NodeIdentifier godocs: IdentifyNode -> NodeIdentity
...
The godocs had an older name for the NodeIdentity function.
2017-08-26 15:56:33 -04:00
Kubernetes Submit Queue
9548fbd514
Merge pull request #47955 from CaoShuFeng/trivial
...
Automatic merge from submit-queue
[trivial]fix function name in comment
**Release note**:
```
NONE
```
2017-07-13 18:50:19 -07:00
Jordan Liggitt
e3e25df5df
Improve node restriction message
2017-07-10 22:44:24 -04:00
Cao Shufeng
fad8b45667
[trivial]fix function name in comment
2017-06-23 17:53:35 +08:00
Jordan Liggitt
fc8e915a4b
Add Node authorization mode based on graph of node-related objects
2017-05-30 16:53:03 -04:00
