Monis Khan
751741df59
Allow injection of policy in RBAC post start hook
...
This change allows the RBAC PostStartHook logic to be reused with
different policy data when bootstrapping the cluster. Thus any
changes to the bootstrap logic are separated from the policy data.
Signed-off-by: Monis Khan <mkhan@redhat.com>
2017-08-15 14:25:11 -04:00
ymqytw
7500b55ce4
move retry to client-go
2017-08-14 14:16:26 -07:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Jordan Liggitt
dd7be70a4a
Add rbac.authorization.k8s.io/v1
2017-08-09 17:04:54 -04:00
Jordan Liggitt
d5730f40cd
Ensure namespace exists as part of RBAC reconciliation
2017-07-04 18:24:16 -05:00
Chao Xu
60604f8818
run hack/update-all
2017-06-22 11:31:03 -07:00
Chao Xu
cde4772928
run ./root-rewrite-all-other-apis.sh, then run make all, pkg/... compiles
2017-06-22 11:30:52 -07:00
deads2k
963c85e1c8
sort current API versions and fallback for others
2017-06-14 09:29:44 -04:00
Mike Danese
a05c3c0efd
autogenerated
2017-04-14 10:40:57 -07:00
Jordan Liggitt
890894ac4f
Disable RBAC post-start hook if not using the RBAC authorizer
2017-03-30 23:30:04 -04:00
deads2k
e24b1c0c25
add namespaced role bindings
2017-02-28 13:04:23 -05:00
deads2k
a849df9dff
allow reconcilation of namespaced rolebindings
2017-02-28 12:58:29 -05:00
Jordan Liggitt
4127322f23
Restore wait for etcd in rbac initialization
2017-02-27 15:09:47 -05:00
deads2k
d5cd40a585
reconcile namespace roles during startup
2017-02-23 11:45:49 -05:00
deads2k
06f5de9d84
make reconcilation generic to handle roles and clusterroles
2017-02-23 08:24:59 -05:00
Dr. Stefan Schimanski
0e9c1f75bf
Update bazel
2017-02-15 10:25:15 +01:00
Dr. Stefan Schimanski
27e01b5c46
k8s.io/apiserver: fixup imports and renamed packages
2017-02-15 10:24:58 +01:00
Jordan Liggitt
26b42d350d
Reconcile bootstrap clusterroles on server start
2017-02-14 12:33:05 -05:00
Dr. Stefan Schimanski
6af3210d6f
Update generated files
2017-02-03 08:15:46 +01:00
Dr. Stefan Schimanski
536460e1d9
Mechanical fixup imports: pkg/genericapiserver
2017-02-03 08:15:45 +01:00
Dr. Stefan Schimanski
de2eee391a
Update bazel
2017-02-02 15:19:04 +01:00
Dr. Stefan Schimanski
bfe0d50ce8
pkg/genericapiserver/server: cut off from pkg/api
2017-02-02 15:19:01 +01:00
Clayton Coleman
469df12038
refactor: move ListOptions references to metav1
2017-01-23 17:52:46 -05:00
Clayton Coleman
245b592fac
Convert core code to metav1.ListOptions
2017-01-23 17:52:45 -05:00
Dr. Stefan Schimanski
3d9449a353
genericapiserver: fix imports
2017-01-19 13:06:47 +01:00
deads2k
d1fec7068f
generated
2017-01-18 10:35:46 -05:00
deads2k
e74efe41a0
add rbac v1beta1
2017-01-18 09:49:33 -05:00
Dr. Stefan Schimanski
8fe0958ba0
Update bazel
2017-01-17 09:30:48 +01:00
Dr. Stefan Schimanski
5c88b7d05a
Fix imports
2017-01-17 09:30:30 +01:00
Timothy St. Clair
fbc5323dad
Refactor registry to use store vs. etcd
2017-01-12 09:23:38 -06:00
Dr. Stefan Schimanski
4a1d507756
Update bazel
2017-01-11 18:53:24 +01:00
Dr. Stefan Schimanski
cf60bec396
Split out server side code from pkg/apis/rbac/validation
2017-01-11 18:31:58 +01:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
Jordan Liggitt
a2670d3b9d
Allow rolebinding/clusterrolebinding with explicit bind permission check
2017-01-10 14:34:33 -05:00
Jeff Grafton
20d221f75c
Enable auto-generating sources rules
2017-01-05 14:14:13 -08:00
deads2k
90a7251394
retry RBAC initialization for up to 30 seconds, kill server on failure
2017-01-03 08:52:26 -05:00
Mike Danese
c87de85347
autoupdate BUILD files
2016-12-12 13:30:07 -08:00
Monis Khan
a6bafbacbf
Refactor REST storage to use generic defaults
...
Signed-off-by: Monis Khan <mkhan@redhat.com>
2016-12-08 17:24:21 -05:00
deads2k
2923d09091
remove rbac super user
2016-12-05 13:49:54 -05:00
Dr. Stefan Schimanski
b2b0142b6f
Update bazel
2016-12-03 18:35:18 +01:00
Dr. Stefan Schimanski
1f5511b131
Move RESTStorageProvider interface into pkg/master
2016-12-03 18:35:15 +01:00
deads2k
7e65d5693b
remove non-reuseable bits of MasterServer
2016-10-31 08:50:05 -04:00
Chao Xu
850729bfaf
include multiple versions in clientset
...
update client-gen to use the term "internalversion" rather than "unversioned";
leave internal one unqualified;
cleanup client-gen
2016-10-29 13:30:47 -07:00
Mike Danese
3b6a067afc
autogenerated
2016-10-21 17:32:32 -07:00
deads2k
ceaf026881
slim down authorization listing interfaces
2016-10-13 07:50:01 -04:00
deads2k
467b7d928f
add clusterrolebindings to bootstrapping
2016-10-10 15:00:35 -04:00
deads2k
4c8959df59
pass loopback config to posthooks
2016-09-30 10:34:33 -04:00
deads2k
b330b0a220
start creating controller SA roles. start with just one
2016-09-26 09:31:36 -04:00
deads2k
17a21c7bdb
move reststorage providers to their correct packages
2016-09-23 16:24:48 -04:00
