Commit Graph

222 Commits

Author SHA1 Message Date
Piotr Szczesniak
7967642cf0 Implemented first version of InitialResources plugin. 2015-09-01 17:24:13 +02:00
k8s-merge-robot
08668d7d94 Merge pull request #13309 from kubernetes/revert-13246-revert-12492-limit_range_api
Auto commit by PR queue bot
2015-08-28 21:03:49 -07:00
Prashanth B
52f7833cd3 Revert "Revert "LimitRange updates for Resource Requirements Requests"" 2015-08-28 09:26:36 -07:00
Solly Ross
3bbdb16149 Merge NamespaceExists into NamespaceLifecycle
This commit merges the NamespaceExists admission controller
into the NamespaceLifecycle admission controller.

New tests were added to the NamespaceLifecycle addmission controller
tests, and the test case was fixed so that it runs without panicing.

Additionally, the NamespaceExists admission controller was marked as
deprecated in the docs.

Closes #12053
2015-08-28 10:56:18 -04:00
Piotr Szczesniak
6e05b9e3a3 Revert "LimitRange updates for Resource Requirements Requests" 2015-08-27 10:50:50 +02:00
derekwaynecarr
dde158085a Update admission control logic for LimitRange 2015-08-24 15:20:10 -04:00
Kris Rousey
ae6c64d9bb Moving everyone to unversioned client 2015-08-18 10:23:03 -07:00
Mike Danese
8e33cbfa28 rewrite go imports 2015-08-05 17:30:03 -07:00
deads2k
182885e897 make testclient more precise 2015-08-04 13:35:59 -04:00
gmarek
d27ad5b714 Controller codebase refactoring 2015-08-03 17:06:25 +02:00
Muhammed Uluyol
58a875ac2c Add (stopgap) support for an experimental API prefix. 2015-07-30 18:14:29 -07:00
Mike Danese
1b84fb7d74 make testclient threadsafe by guarding internal state with accessors 2015-07-29 16:17:17 -07:00
deads2k
9386db8c99 support multiple index values for a single object 2015-07-29 07:54:09 -04:00
Tim Hockin
1c3233a1d4 Remove v1beta3 2015-07-23 17:21:27 -07:00
Jordan Liggitt
ecebac9395 Add option to require API tokens to exist in admission 2015-06-30 16:12:45 -04:00
derekwaynecarr
d0441a9fba Prevent deletion of default namespace 2015-06-23 14:38:50 -04:00
derekwaynecarr
f6fb72ec51 Admission control attributes has access to resource name 2015-06-23 13:54:55 -04:00
Jeff Lowdermilk
0c7fbacfb1 Merge pull request #10052 from derekwaynecarr/admission_subresources
Admission control exposes subresource
2015-06-22 13:11:58 -07:00
Jordan Liggitt
68a8a25494 Rename pod.spec.serviceAccount -> pod.spec.serviceAccountName for v1 2015-06-18 22:38:00 -04:00
derekwaynecarr
795e444ba3 ResourceQuota should ignore subresources 2015-06-18 16:03:40 -04:00
derekwaynecarr
9a747cde38 LimitRanger should ignore subresources 2015-06-18 15:43:48 -04:00
derekwaynecarr
fce7adf3e7 Admission control exposes subresource 2015-06-18 15:00:46 -04:00
derekwaynecarr
14d2128238 Fix namespace controller on delete to not care if item not found 2015-06-03 22:59:07 -04:00
Rohit Jnagal
ef3d03e6f1 Merge pull request #8875 from derekwaynecarr/limit_range_not_use_requests
Do not set container requests in limit ranger for Kube 1.0
2015-05-29 13:26:00 -07:00
derekwaynecarr
3e8b1d5e01 Update all salt providers to force explicit namespace creation; update e2e 2015-05-28 13:45:49 -04:00
derekwaynecarr
05f099211f Do not set container.requests for v1 2015-05-27 14:27:01 -04:00
deads2k
590bd048a5 add pull secrets to service accounts 2015-05-22 14:05:19 -04:00
Cesar Wong
e95d9c416d Admission control to prevent exec on privileged pods 2015-05-21 13:56:51 -04:00
Cesar Wong
68ad63b5e2 Add operation checking to admission control handlers
Adds a new method to the handler interface that returns true only if the
admission control handler handles that operation.
2015-05-21 13:51:43 -04:00
Paul Weil
aaeb1dad93 expose user info to admission controllers 2015-05-13 21:31:51 -04:00
Jordan Liggitt
7e14a80f63 ServiceAccount admission plugin 2015-05-11 17:18:06 -04:00
Zach Loafman
875e83a741 Revert "Revert "Security context - types, kubelet, admission"" 2015-05-05 16:02:13 -07:00
Zach Loafman
f48904fd5e Revert "Security context - types, kubelet, admission" 2015-05-05 15:20:39 -07:00
Paul Weil
982bf19c20 security context initial implementation - squash 2015-05-05 13:46:13 -04:00
Daniel Smith
4a6ab7fd36 Merge pull request #7597 from eparis/copyright
Use generic copyright holder name in license boilerplate
2015-05-01 17:01:39 -07:00
Eric Paris
6b3a6e6b98 Make copyright ownership statement generic
Instead of saying "Google Inc." (which is not always correct) say "The
Kubernetes Authors", which is generic.
2015-05-01 17:49:56 -04:00
derekwaynecarr
6d08cc30ed Retry incrementing quota if there is a conflict 2015-05-01 15:23:21 -04:00
derekwaynecarr
ac97e9fb67 normalize to lower resource names 2015-04-23 17:39:45 -04:00
Vish Kannan
ee06097c07 Merge pull request #7003 from derekwaynecarr/enforce_unbounded
Reject unbounded cpu and memory pods if quota is restricting it
2015-04-22 11:19:52 -07:00
derekwaynecarr
06eb45fb75 ResourceQuota add object count support for secret and volume claims 2015-04-21 09:49:40 -04:00
derekwaynecarr
75482cabb4 Reject unbounded cpu and memory pods if quota is restricting it 2015-04-17 17:02:47 -04:00
derekwaynecarr
81dcd8c836 Improve error message when name is omitted but generateName is available 2015-04-16 13:06:19 -04:00
derekwaynecarr
a50e53257d Fix nil pointer that can happen if no container resources are supplied 2015-04-14 16:12:24 -04:00
Clayton Coleman
51db3bd654 Create a new testclient package that can be backed by disk files
Standardize how our fakes are used so that a test case can use a
simpler mechanism for providing large, complex data sets, as well
as represent queries over time.
2015-04-07 14:56:15 -04:00
derekwaynecarr
c2b670513c Introduce concept of a default limit 2015-04-01 16:31:25 -04:00
derekwaynecarr
9bd7f05ffc Remove ResourceDefaults plugin 2015-03-31 10:05:28 -04:00
derekwaynecarr
267ef26b0f Do not block admission if namespace already exists 2015-03-26 15:59:09 -04:00
Clayton Coleman
b1ab14315b Clients should not check conditions, UpdateStatus() is inconsistent
Corrects some of the cargo culting that has crept into the API.
2015-03-25 16:25:04 -04:00
derekwaynecarr
29c491ef2e Namespace.Spec.Finalizer support 2015-03-24 10:36:06 -04:00
derekwaynecarr
8aa807bc33 NamespaceLifecycle admission control plugin 2015-03-20 13:23:49 -04:00