github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
39,498 Commits 1 Branch 31 Tags 1,019 MiB
bff3cb4df6
Commit Graph

499 Commits

Author SHA1 Message Date
Michail Kargakis
93c2656d5a api: validate generation updates 2016-07-07 13:09:48 +02:00
bin liu
426fdc431a Merge branch 'master' into fix-typos 2016-07-04 11:20:47 +08:00
Tim Hockin
2f3863f53f Wrap DNS util/validation with api/validation 
Simpler code and a step towards declarative validation.
 2016-07-03 02:20:11 -07:00
Tim Hockin
09f1c97447 Clean up ValidateHasLabel() 2016-07-03 02:20:11 -07:00
Tim Hockin
766f44f715 Move IsSecretKey into util/validation 2016-07-03 02:19:09 -07:00
Tim Hockin
37786e0e77 Make IsHTTPHeaderName return error strings 2016-07-02 17:34:32 -07:00
Tim Hockin
3ad6c397d7 Make IsValid{User,Group}Id return error strings 2016-07-02 17:34:32 -07:00
Tim Hockin
87c1fc50a8 Make IsValidIP return error strings 
Also treat 0.0.0.0 as special, like loopback and multicast.
 2016-07-02 17:32:05 -07:00
Tim Hockin
14bece550f Make IsValidPortNum/Name return error strings 2016-07-02 17:32:05 -07:00
Tim Hockin
189d4a5159 Make CIdentifier return error strings 2016-07-02 17:32:05 -07:00
David McMahon
ef0c9f0c5b Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
k8s-merge-robot
b51e5c0127 Merge pull request #26276 from deads2k/tweak-quota-validation 
Automatic merge from submit-queue

make quota validation re-useable

Break quota validation into smaller functions to allow for object re-use.

@derekwaynecarr
 2016-06-25 05:23:55 -07:00
bin liu
fd27cd47f7 fix some typos 
Signed-off-by: bin liu <liubin0329@gmail.com>
 2016-06-22 18:14:26 +08:00
k8s-merge-robot
7ee4189cf6 Merge pull request #27036 from sttts/sttts-secure-seccomp-path 
Automatic merge from submit-queue

Filter seccomp profile path from malicious .. and /

Without this patch with `localhost/<some-releative-path>` as seccomp profile one can load any file on the host, e.g. `localhost/../../../../dev/mem` which is not healthy for the kubelet.

/cc @jfrazelle 

Unit tests depend on https://github.com/kubernetes/kubernetes/pull/26710.
 2016-06-18 15:58:07 -07:00
Avesh Agarwal
eac3e3d809 Fix divisor for memory resource as it should never be millibytes 2016-06-15 15:32:59 -04:00
deads2k
1388efe6bb make quota validation re-useable 2016-06-15 14:38:43 -04:00
Dr. Stefan Schimanski
3826d2598c Move seccomp annotation validation into api/validation 2016-06-14 14:58:32 +02:00
k8s-merge-robot
5288a255f4 Merge pull request #25567 from gmarek/validate 
Automatic merge from submit-queue

Add Controller field to OwnerReference

cc @davidopp
 2016-05-31 14:21:38 -07:00
gmarek
a6dd89d797 Add Controller field to OwnerReference 2016-05-31 15:33:35 +02:00
Paul Morie
faa112bad1 Add selector to PersistentVolumeClaim 2016-05-30 12:09:50 -04:00
k8s-merge-robot
a550cf16b9 Merge pull request #25826 from freehan/svcsourcerange 
Automatic merge from submit-queue

promote sourceRange into service spec

@thockin  one more for your pile

I will add docs at `http://releases.k8s.io/HEAD/docs/user-guide/services-firewalls.md`

cc: @justinsb 

Fixes: #20392
 2016-05-28 02:20:13 -07:00
Alex Robinson
294e49f8b9 Merge pull request #26121 from hpcloud/hpe/vsphere-vol-validation 
Adding vSphere volume validation in api
 2016-05-27 10:11:23 -07:00
Alex Mohr
edda837142 Merge pull request #25599 from caesarxuchao/orphaning-finalizer 
Add orphaning finalizer logic to GC
 2016-05-26 13:19:19 -07:00
Minhan Xia
a1bd33f510 promote sourceRange into service spec 2016-05-26 10:42:30 -07:00
Chao Xu
1665546d2d add finalizer logics to the API server and the garbage collector; handling DeleteOptions.OrphanDependents in the API server 2016-05-24 13:07:28 -07:00
Avesh Agarwal
1931931494 Downward API implementation for resources limits and requests 2016-05-24 12:22:35 -04:00
Abitha Palaniappan
66f9cd82a7 Adding vSphere volume validation in api 2016-05-23 14:39:09 -07:00
Tim Hockin
54a3efb364 Make IsDNS952Label return error strings 2016-05-19 08:57:49 -07:00
Tim Hockin
5862a60ae7 Make IsDNS1123Subdomain return error strings 2016-05-19 08:57:49 -07:00
Tim Hockin
77eff06a53 Make IsDNS1123Label return error strings 2016-05-19 08:57:49 -07:00
k8s-merge-robot
4f09f51486 Merge pull request #24800 from thockin/validation_pt8-3 
Automatic merge from submit-queue

Make name validators return string slices

Part of the larger validation PR, broken out for easier review and merge.  Builds on previous PRs in the series.
 2016-05-19 02:15:27 -07:00
Kevin
52fb89ff73 implement taints and tolerations 2016-05-18 15:06:23 +00:00
k8s-merge-robot
e4e6e46197 Merge pull request #24799 from thockin/validation_pt8-2 
Automatic merge from submit-queue

Make IsValidLabelValue return error strings

Part of the larger validation PR, broken out for easier review and merge.  Builds on previous PRs in the series.
 2016-05-18 04:08:15 -07:00
Tim Hockin
152c86ab06 Make name validators return string slices 2016-05-18 00:48:01 -07:00
Tim Hockin
66d0d87829 Make IsValidLabelValue return error strings 2016-05-17 21:36:10 -07:00
Clayton Coleman
6685715c4c
API for adding init containers 2016-05-17 00:29:49 -04:00
k8s-merge-robot
4ac32179bf Merge pull request #24798 from thockin/validation_pt8-1 
Automatic merge from submit-queue

Make IsQualifiedName return error strings

Part of the larger validation PR, broken out for easier review and merge.

@lavalamp FYI, but I know you're swamped, too.
 2016-05-14 22:14:17 -07:00
k8s-merge-robot
5c30f983d9 Merge pull request #25018 from smarterclayton/fast_conversion 
Automatic merge from submit-queue

Reduce allocations during conversion, enable new UnsafeConvertToVersion path

Cleans up the conversion path to avoid a few unnecessary allocations, then creates a new UnsafeConvertToVersion path that will allow encode/decode to bypass copying the object for performance. In that subsequent PR, ConvertToVersion will start to call Copy() and we will refactor conversions to reuse as much of the existing object as possible.

Also changes the unversioned.ObjectKind signature to not require allocations - speeds up a few common paths.
 2016-05-12 14:50:01 -07:00
k8s-merge-robot
08440b5dcc Merge pull request #24836 from Clarifai/gpu-impl 
Automatic merge from submit-queue

WIP v0 NVIDIA GPU support

```release-note
* Alpha support for scheduling pods on machines with NVIDIA GPUs whose kubelets use the `--experimental-nvidia-gpus` flag, using the alpha.kubernetes.io/nvidia-gpu resource 
```

Implements part of #24071 for  #23587

I am not familiar with the scheduler enough to know what to do with the scores. Mostly punting for now.

Missing items from the implementation plan: limitranger, rkt support, kubectl
support and docs

cc @erictune @davidopp @dchen1107 @vishh @Hui-Zhi @gopinatht
 2016-05-12 14:04:15 -07:00
Clayton Coleman
a84e62d9e6
Change ObjectKind signature to avoid allocations 
We don't need to pass a pointer into SetGroupKindVersion() - a
struct works just as well.
 2016-05-12 10:10:35 -04:00
Tim Hockin
72955770f3 Make IsQualifiedName return error strings 2016-05-10 11:23:23 -07:00
Rudi Chiarito
362c763fca WIP v0 NVIDIA GPU support 
Implements part of #24071

I am not familiar with the scheduler enough to know what to do with the scores. Punting for now.

Missing items from the implementation plan: limitranger, rkt support, kubectl
support and user docs
 2016-05-09 19:20:05 -04:00
k8s-merge-robot
f2f3b49f58 Merge pull request #22575 from MikaelCluseau/wip-issue-20466 
Automatic merge from submit-queue

Add subPath to mount a child dir or file of a volumeMount

Allow users to specify a subPath in Container.volumeMounts so they can use a single volume for many mounts instead of creating many volumes. For instance, a user can now use a single PersistentVolume to store the Mysql database and the document root of an Apache server of a LAMP stack pod by mapping them to different subPaths in this single volume.

Also solves https://github.com/kubernetes/kubernetes/issues/20466.
 2016-05-08 08:45:15 -07:00
Kevin
82ba4f077e implement inter pod topological affinity and anti-affinity 2016-05-06 06:46:23 +00:00
Mikaël Cluseau
06900a934d Introduce subPath in VolumeMount 2016-05-06 15:08:41 +11:00
Chao Xu
a46b7775fc API changes for finalizers and system-wide garbage collector 2016-05-04 21:54:55 -07:00
Clayton Coleman
fdb110c859
Fix the rest of the code 2016-04-29 17:12:10 -04:00
k8s-merge-robot
ad67363c12 Merge pull request #24362 from ArtfulCoder/hostname-field 
Automatic merge from submit-queue

Promote Pod Hostname & Subdomain to fields (were annotations)

Deprecating the podHostName, subdomain and PodHostnames annotations and created corresponding new fields for them on PodSpec and Endpoints types.

Annotation doc: #22564
Annotation code: #20688
 2016-04-29 01:06:45 -07:00
Abhishek Shah
8a3ed48808 Added Hostname and Subdomain field to Pod.Spec 2016-04-28 10:56:56 -07:00
Jordan Liggitt
1e5815872e Validate deletion timestamp doesn't change on update 2016-04-28 11:50:48 -04:00
André Martins
c1a360b1d5 Removing IPv4 enforcement on Endpoints 
Signed-off-by: André Martins <aanm90@gmail.com>
 2016-04-14 16:20:00 +01:00
Paul Morie
24aade64f5 Validate that volume mountpoints are unique 2016-03-17 23:52:34 -04:00
Chao Xu
a6240c1ab8 add FullyLabeledReplicas in Replicaset Status and ReplicationController Status 2016-03-11 23:55:04 -08:00
Avesh Agarwal
427774306c Fix validation of resources (cpu, memory, storage) for limit range types. 2016-03-10 11:33:53 -05:00
Abhishek Shah
a3c00aadd5 Specify hostname, subdomain via annotation on podspec. 
The hostname is a DNS A record, if the subdomain maps to a service name
in the same namespace
 2016-03-04 13:28:33 -08:00
k8s-merge-robot
de72b6be1b Merge pull request #21907 from justinsb/load_balancer_source_ranges 
Auto commit by PR queue bot
 2016-03-03 14:10:47 -08:00
Justin Santa Barbara
cb92133dfa LB Source Ranges: Move validation into API layer 
Had to move other things around too to avoid a weird api ->
cloudprovider dependency.

Also adding fixes per code reviews.

(This is a squash of the previously approved commits)
 2016-03-03 10:27:17 -05:00
Tim Hockin
56be551416 Validate volume paths do not have ':' 2016-02-29 13:22:45 -08:00
derekwaynecarr
df064bd53d ResourceQuota API validation for scopes and new resource types 2016-02-26 20:34:14 -05:00
Jordan Liggitt
b502b8f6a1 Restore service port validation compatibility with 1.0/1.1 2016-02-23 21:27:44 -05:00
k8s-merge-robot
c91a79be45 Merge pull request #21199 from erictune/validation-helper 
Auto commit by PR queue bot
 2016-02-16 07:07:49 -08:00
derekwaynecarr
c5cb09405c Improve persistent volume claim validation 2016-02-15 15:13:53 -05:00
k8s-merge-robot
c48e94df89 Merge pull request #20956 from derekwaynecarr/cleanup_validation 
Auto commit by PR queue bot
 2016-02-15 11:55:54 -08:00
k8s-merge-robot
4ff418ca50 Merge pull request #21057 from davidopp/work1 
Auto commit by PR queue bot
 2016-02-14 20:48:17 -08:00
David Oppenheimer
66368efad5 Comment out NodeAffinity.RequiredDuringSchedulingRequiredDuringExecution 
because it is not yet implemented.
 2016-02-14 17:46:13 -08:00
Paul Morie
d1dc259ef2 ConfigMap volume source 2016-02-14 16:19:17 -05:00
Eric Tune
825dc470cc Add a validation helper function. 
I will use this in a subsequent PR as part of #12298
 2016-02-12 14:38:22 -08:00
derekwaynecarr
cc2137fccc Fixup validation for containers requests or limits to use quantity comparison 2016-02-11 15:34:00 -05:00
Jan Safranek
40c97ddd5f Remove validation of *VolumeSource.FSType. 
Most volume plugins use SafeFormatAndMount, which uses ext4 by default.

FlexVolume plugin has FSType attribute 'omitempty', so reflect it in the
description of the type.
 2016-02-09 09:13:06 +01:00
Huamin Chen
d7e4b826b9 support Azure File Service volume 
Signed-off-by: Huamin Chen <hchen@redhat.com>
 2016-02-09 01:07:12 +00:00
k8s-merge-robot
6103b8713e Merge pull request #20648 from deads2k/fix-validation 
Auto commit by PR queue bot
 2016-02-06 17:13:19 -08:00
k8s-merge-robot
aac20ed69d Merge pull request #20600 from freehan/servicevalidation 
Auto commit by PR queue bot
 2016-02-06 10:23:18 -08:00
k8s-merge-robot
0ad6326d7f Merge pull request #20170 from pmorie/update-ads-pod 
Auto commit by PR queue bot
 2016-02-05 20:37:39 -08:00
Paul Morie
0b82d0b491 Allow pod.Spec.ActiveDeadlineSeconds to be updateable 2016-02-05 15:58:31 -05:00
Prashanth Balasubramanian
c56bebf594 Basic TLS support. 2016-02-05 11:00:04 -08:00
Rudi Chiarito
a2d1bb7acf Add httpHeaders to httpGet liveness probe 
Also update existing documentation and try to steer users away from 'host'.
Add validation.
 2016-02-05 11:20:04 -05:00
Daniel Smith
e6639de333 Merge pull request #20380 from mqliang/podcidr-validation 
pod cidr validation
 2016-02-04 23:16:02 -08:00
deads2k
e084578148 fix validation error path for namespace 2016-02-04 10:10:49 -05:00
Kevin
c8c82c1d8f implement Node affinity and NodeSelector 2016-02-04 01:53:14 +00:00
Minhan Xia
ec7366fc2a add service validation for mix protocol 2016-02-03 14:54:32 -08:00
k8s-merge-robot
072bfd40ca Merge pull request #18556 from mqliang/podValidation 
Auto commit by PR queue bot
 2016-02-02 10:26:43 -08:00
Chao Xu
90b4662d8d Add services/status path, and let the service controller uses Services.UpdateStatus() 2016-01-31 12:39:45 -08:00
mqliang
470d7af8c9 pod cidr validation 2016-01-31 11:49:31 +08:00
Paul Morie
defd1d0544 Add size limit for ConfigMap 2016-01-29 00:14:28 -05:00
Paul Morie
9030f16071 Move ConfigMap to main API 2016-01-28 17:07:05 -05:00
jhadvig
5927ad81be Additional SecretTypes 2016-01-26 14:34:12 +01:00
k8s-merge-robot
3978c76a26 Merge pull request #18790 from erictune/secret-validate 
Auto commit by PR queue bot
 2016-01-21 00:46:49 -08:00
k8s-merge-robot
8ed248021e Merge pull request #17650 from jsafrane/devel/cinder-format 
Auto commit by PR queue bot
 2016-01-20 22:18:25 -08:00
k8s-merge-robot
1c861d43ac Merge pull request #18298 from pmorie/secret-env 
Auto commit by PR queue bot
 2016-01-20 03:55:40 -08:00
Eric Tune
4a3d4defdf Validate kubernetes.io/dockerconfigjson secrets 
Added unit test.
 2016-01-19 12:35:30 -08:00
Jan Safranek
f912870784 openstack: Use common SafeFormatAndMount() for mounting. 
There is no reason for OpenStack + Cinder to use it's own variant of format
& mount.
 2016-01-19 09:36:38 +01:00
Matt McNaughton
90d68a53b3 Rename Positive qualifier to Nonnegative 
It makes more sense for `ValidatePositiveField` and
`ValidatePositiveQuantity` methods to be named `ValidateNonnegativeField`
and `ValidateNonnegativeQuantity` as that is what is truly being
checked. This commit simply updates the method names everywhere they are
used.
 2016-01-18 17:29:15 -05:00
Paul Morie
60cf252e8b Add validation for variant-type of EnvVarSource 2016-01-18 15:07:48 -05:00
Paul Morie
6cfd101251 Add support for ConfigMap keys in env vars 2016-01-13 17:00:15 -05:00
k8s-merge-robot
170c03a85f Merge pull request #16354 from mdshuai/valid-supplemental-groups 
Auto commit by PR queue bot
 2016-01-11 00:48:34 -08:00
mdshuai
27934da9cc Validate uids and gids for securitycontext 2016-01-11 15:17:25 +08:00
Kenneth Shelton
9e6c45c395 Updated comments 
Updated documentation
Fixed e2e test
 2016-01-05 20:51:21 +00:00
Kenneth Shelton
d399a8f8cc * Added UDP LB support (for GCE) 2016-01-05 20:51:21 +00:00
Tim Hockin
708fda2683 field paths are JSON-style 2015-12-31 15:37:12 -08:00
Chakravarthy Nelluri
fa76de79e5 Add support for flex volume. Flex volume adds support for thirdparty(vendor) 
volumes and custom mounts.
 2015-12-23 14:11:38 -08:00