kubernetes/plugin/pkg/auth/authorizer/node
Patrick Ohly ff3e5e06a7 GenericEphemeralVolume: initial implementation
The implementation consists of
- identifying all places where VolumeSource.PersistentVolumeClaim has
  a special meaning and then ensuring that the same code path is taken
  for an ephemeral volume, with the ownership check
- adding a controller that produces the PVCs for each embedded
  VolumeSource.EphemeralVolume
- relaxing the PVC protection controller such that it removes
  the finalizer already before the pod is deleted (only
  if the GenericEphemeralVolume feature is enabled): this is
  needed to break a cycle where foreground deletion of the pod
  blocks on removing the PVC, which waits for deletion of the pod

The controller was derived from the endpointslices controller.
2020-07-09 23:29:24 +02:00
..
BUILD Run hack/update-vendor.sh 2020-05-16 07:54:33 -04:00
graph_populator.go switch over k/k to use klog v2 2020-05-16 07:54:27 -04:00
graph_test.go Indicate node authorizer does not support rule resolution 2020-05-12 20:34:13 -04:00
graph.go GenericEphemeralVolume: initial implementation 2020-07-09 23:29:24 +02:00
intset_test.go Switch node authorizer index to refcounts 2020-02-10 13:24:13 -05:00
intset.go Switch node authorizer index to refcounts 2020-02-10 13:24:13 -05:00
node_authorizer_test.go Indicate node authorizer does not support rule resolution 2020-05-12 20:34:13 -04:00
node_authorizer.go Migrate a single node_authorizer.go klog.Infof call to klog.InfoS (#91591) 2020-06-09 14:49:01 -07:00
OWNERS Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00