yiduyangyi
e6c4633232
fix golint failures in pkg/kubeapiserver/options, fix some incorrect replace of receiver name
2020-07-23 19:02:07 +08:00
yiduyangyi
0520d75838
fix golint failures in pkg/kubeapiserver/options, rename receiver name of BuiltInAuthorizationOptions to o
2020-07-23 18:52:15 +08:00
yiduyangyi
e441c07fe2
fix golint failures in pkg/kubeapiserver/options, use API Server in commemts instead of APIServer
2020-07-23 18:41:37 +08:00
yiduyangyi
e2838df7c7
fix golint failures in pkg/kubeapiserver/options
2020-07-15 16:03:08 +08:00
Jordan Liggitt
dc0e51dd18
Plumb authorization webhook version from CLI to config
2019-11-18 23:58:05 -08:00
Jordan Liggitt
d54a70db5c
Switch kubelet/aggregated API servers to use v1 subjectaccessreviews
2019-11-11 17:19:11 -05:00
mengyang02
da072063d1
to use existing validating function
2019-09-24 20:16:17 +08:00
lovejoy
d437305cbf
Fix the authorization-policy-file description
...
Actually this is in a format like below not a csv format
```json
{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"group":"system:authenticated", "namespace": "*", "resource": "*","apiGroup": "*"}}
{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"group":"system:authenticated", "namespace": "*", "resource": "ingresses","apiGroup": "extensions"}}
{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"group":"system:authenticated", "namespace": "*", "resource": "*","apiGroup": "apiextensions.k8s.io"}}
```
2018-12-24 14:54:34 +08:00
walter
2af982abb9
Fixes lint errors in kubeapiserver packages
...
Fixes lint errors in kubeapiserver/admission, kubeapiserver/authorizer,
kubeapiserver/authenticator. Also enables lint testing of these
directories.
Fixed go format.
Fixed changes from config.
2018-11-04 17:22:41 -08:00
Christoph Blecker
97b2992dc1
Update gofmt for go1.11
2018-10-05 12:59:38 -07:00
yue9944882
f624a4efb8
externalize node admission
...
fixes internal pod annotation reference
completely strip internal informers from authz initialization
2018-08-21 23:33:03 +08:00
hzxuzhonghu
755df0461d
validate authorization flags in BuiltInAuthorizationOptions.Validate
2018-03-26 20:37:02 +08:00
junxu
8461d5f8d9
Remove deprecated paramter "authorization-rbac-super-user"
2018-03-15 02:22:55 -04:00
Jordan Liggitt
ba09fadecf
Plumb versioned informers to authz config
2018-01-16 23:30:53 -05:00
xiangpengzhao
420caf200c
Delete "hard-coded" default value in flags usage.
2017-04-07 11:21:37 +08:00
Jordan Liggitt
890894ac4f
Disable RBAC post-start hook if not using the RBAC authorizer
2017-03-30 23:30:04 -04:00
Andy Goldstein
022bff7fbe
Switch admission to use shared informers
2017-02-23 11:16:09 -05:00
Lucas Käldström
ab344da565
Move the authorization mode constants into a separate package
2017-02-23 15:27:16 +02:00
deads2k
a3564c0aa8
start kubeapiserver package for sharing between kubeapiserver and federation
2016-12-22 07:43:42 -05:00