yue9944882
f624a4efb8
externalize node admission
...
fixes internal pod annotation reference
completely strip internal informers from authz initialization
2018-08-21 23:33:03 +08:00
yue9944882
e7d0983707
externalize pv informer in node authorizer
2018-08-17 11:14:43 +08:00
yue9944882
715f04b2ed
should cast va instead of pv
2018-08-16 11:15:08 +08:00
yue9944882
bc1fb1f7e8
node authz/ad externalization
2018-08-09 10:57:30 +08:00
Michael Taufen
c41cf55a2c
explicit kubelet config key in Node.Spec.ConfigSource.ConfigMap
...
This makes the Kubelet config key in the ConfigMap an explicit part of
the API, so we can stop using magic key names.
As part of this change, we are retiring ConfigMapRef for ConfigMap.
2018-05-08 15:37:26 -07:00
hangaoshuai
33f389bc1e
use handle DeletedFinalStateUnknown objects in function deleteNode
2018-03-30 11:51:39 +08:00
Michael Taufen
ab8dc12333
node authorizer sets up access rules for dynamic config
...
This PR makes the node authorizer automatically set up access rules for
dynamic Kubelet config.
I also added some validation to the node strategy, which I discovered we
were missing while writing this.
2018-03-27 08:49:45 -07:00
NickrenREN
7b9d2c046f
Use v1beta1 VolumeAttachment
2018-01-31 18:46:11 +08:00
Jordan Liggitt
ecfd18e2a6
Add get volumeattachments support to Node authorizer
2018-01-17 00:00:18 -05:00
Dr. Stefan Schimanski
012b085ac8
pkg/apis/core: mechanical import fixes in dependencies
2017-11-09 12:14:08 +01:00
Jordan Liggitt
fc8e915a4b
Add Node authorization mode based on graph of node-related objects
2017-05-30 16:53:03 -04:00