David Eads
75c448dbc7
make easy validation admission plugins into validators
2017-11-03 07:54:39 -04:00
Dr. Stefan Schimanski
aedcf681b3
admission: rename Validate{ -> Initialization}, Validat{ingAdmit -> e}
2017-11-02 09:29:55 +01:00
David Eads
8c1fe1f61a
move webhook admission to generic apiserver
2017-10-26 07:45:49 -04:00
David Eads
0859798e8e
update admission webhook to accept client config
2017-10-19 09:52:58 -04:00
Dr. Stefan Schimanski
cad0364e73
Update bazel
2017-10-18 17:24:04 +02:00
Dr. Stefan Schimanski
7773a30f67
pkg/api/legacyscheme: fixup imports
2017-10-18 17:23:55 +02:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
p0lyn0mial
fa96700b76
removes k8s.io/kubernetes/pkg/api dependency from the webhook plugin.
2017-10-09 22:25:03 +02:00
p0lyn0mial
6b1f1d1414
removes Authorizer and ExternalClientSet from kubeapiserver's admission initializer.
2017-10-03 18:08:30 +02:00
David Eads
2572ea50e0
add permissions to workload controllers to block owners
2017-09-05 13:47:49 -04:00
David Eads
6d040812f0
check block owner ref on finalizers subresource
2017-09-05 11:29:52 -04:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Clayton Coleman
772ab8e1b4
Load initializers from dynamic config
...
Handle failure cases on startup gracefully to avoid causing cascading
errors and poor initialization in other components. Initial errors from
config load cause the initializer to pause and hold requests. Return
typed errors to better communicate failures to clients.
Add code to handle two specific cases - admin wants to bypass
initialization defaulting, and mirror pods (which want to bypass
initialization because the kubelet owns their lifecycle).
2017-06-05 19:12:41 -04:00
p0lyn0mial
c5019bf696
remove init blocks from all admission plugins
2017-05-23 22:00:32 +02:00
Kubernetes Submit Queue
4f55f49035
Merge pull request #46042 from derekwaynecarr/quota-admission-registry
...
Automatic merge from submit-queue (batch tested with PRs 45346, 45903, 45958, 46042, 45975)
ResourceQuota admission control injects registry
**What this PR does / why we need it**:
The `ResourceQuota` admission controller works with a registry that maps a GroupKind to an Evaluator. The registry used in the existing plug-in is not injectable, which makes usage of the ResourceQuota plug-in in other API server contexts difficult. This PR updates the code to support late injection of the registry via a plug-in initializer.
2017-05-19 22:29:34 -07:00
Derek Carr
a71bea312a
ResourceQuota admission control injects registry
2017-05-18 23:17:13 -04:00
p0lyn0mial
3f8d6e9210
Change all the existing admission init blocks to call a Register function
...
this is a two stage refactor when done there will be no init block in admission plugins.
Instead all plugins expose Register function which accept admission.Plugins instance.
The registration to global plugin registry happens inside Register func.
2017-05-18 22:25:01 +02:00
Derek Carr
c20a33c5bd
OwnerReferencesPermissionEnforcement ignores pods/status
2017-05-15 12:21:23 -04:00
Mike Danese
a05c3c0efd
autogenerated
2017-04-14 10:40:57 -07:00
Chao Xu
9d7a8df5ee
add gc admission plugin that prevents user who doesn't have delete permission of the owner from setting blockOwnerDeletion
2017-04-13 11:55:22 -07:00
Dr. Stefan Schimanski
63f547e1b1
pkg/admission: make plugin registry non-global
2017-04-12 11:37:25 +02:00
Dr. Stefan Schimanski
44ea6b3f30
Update generated files
2017-01-29 21:41:45 +01:00
Dr. Stefan Schimanski
79adb99a13
pkg/api: move Semantic equality to k8s.io/apimachinery/pkg/api/equality
2017-01-29 21:41:45 +01:00
Clayton Coleman
469df12038
refactor: move ListOptions references to metav1
2017-01-23 17:52:46 -05:00
deads2k
01b3b2b461
move admission to genericapiserver
2017-01-18 08:15:19 -05:00
Clayton Coleman
9a2a50cda7
refactor: use metav1.ObjectMeta in other types
2017-01-17 16:17:19 -05:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
Jeff Grafton
20d221f75c
Enable auto-generating sources rules
2017-01-05 14:14:13 -08:00
deads2k
4d7fcae85a
mechanicals
2017-01-05 11:14:27 -05:00
deads2k
ca58ec0237
mechanical changes for move
2017-01-04 10:27:05 -05:00
deads2k
2861509b6d
refactored admission to avoid internal client references
2017-01-03 15:50:12 -05:00
Mike Danese
161c391f44
autogenerated
2016-12-29 13:04:10 -08:00
Mike Danese
c87de85347
autoupdate BUILD files
2016-12-12 13:30:07 -08:00
Clayton Coleman
c52d510a24
refactor: generated
2016-12-10 18:05:53 -05:00
Clayton Coleman
3c72ee2189
Change references to OwnerReference
2016-12-10 18:05:36 -05:00
Clayton Coleman
35a6bfbcee
generated: refactor
2016-11-23 22:30:47 -06:00
Mike Danese
3b6a067afc
autogenerated
2016-10-21 17:32:32 -07:00
deads2k
14c164a328
add ownerref permission checks
2016-10-17 09:38:05 -04:00
