kubernetes/pkg/kubeapiserver
Monis Khan b5ef684d90
admission: run PodSecurity before PodSecurityPolicy
This change fixes the order in which the PodSecurity and
PodSecurityPolicy admission plugins are run.  The old code intended
for PSA to run before PSP, but attempted to enforce that via
registration order (which is irrelevant).  Now PSA is correctly
executed before PSP to allow for audit and warning modes to be
exercised even in the presence of a deny PSP policy.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-09-01 11:39:58 -04:00
..
admission add tracing to webhook requests 2021-07-09 06:30:05 -07:00
authenticator remove go-openapi/spec 2021-04-21 11:31:49 +02:00
authorizer hack/update-bazel.sh 2021-02-28 15:17:29 -08:00
options admission: run PodSecurity before PodSecurityPolicy 2021-09-01 11:39:58 -04:00
default_storage_factory_builder.go CronJob: switch storage version to batch/v1 in 1.22 2021-05-27 18:07:16 +08:00
doc.go Fix golint issues in pkg/kubeapiserver 2019-11-05 22:25:32 +03:00
OWNERS add logicalhan to reviewers for api-machinery directories 2019-08-27 10:40:29 -07:00