github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
4940c32c39
kubernetes/cluster
History
Kubernetes Submit Queue 1f4e2efc5b Merge pull request #41184 from liggitt/subject-apigroup 
Automatic merge from submit-queue (batch tested with PRs 41357, 41178, 41280, 41184, 41278)

Switch RBAC subject apiVersion to apiGroup in v1beta1

Referencing a subject from an RBAC role binding, the API group and kind of the subject is needed to fully-qualify the reference.

The version is not, and adds complexity around re-writing the reference when returning the binding from different versions of the API, and when reconciling subjects.

This PR:
* v1beta1: change the subject `apiVersion` field to `apiGroup` (to match roleRef)
* v1alpha1: convert apiVersion to apiGroup for backwards compatibility
* all versions: add defaulting for the three allowed subject kinds
* all versions: add validation to the field so we can count on the data in etcd being good until we decide to relax the apiGroup restriction

```release-note
RBAC `v1beta1` RoleBinding/ClusterRoleBinding subjects changed `apiVersion` to `apiGroup` to fully-qualify a subject. ServiceAccount subjects default to an apiGroup of `""`, User and Group subjects default to an apiGroup of `"rbac.authorization.k8s.io"`.
```

@deads2k @kubernetes/sig-auth-api-reviews @kubernetes/sig-auth-pr-reviews
2017-02-13 21:07:10 -08:00
..
addons Merge pull request #41184 from liggitt/subject-apigroup 2017-02-13 21:07:10 -08:00
aws Merge pull request #38772 from zmerlynn/kube-up-aws-dead 2017-01-31 11:00:44 -08:00
azure azure kube-up respects AZURE_RESOURCE_GROUP 2016-07-08 11:59:32 -07:00
azure-legacy Use ensure-temp-dir in the common.sh script 2017-01-19 09:30:50 -05:00
centos Merge pull request #39169 from remonlam/master 2017-02-02 02:05:17 -08:00
gce Revert "Merge pull request #41132 from kubernetes/revert-40893-kubelet-auth" 2017-02-09 15:55:12 -08:00
gke Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
images Merge pull request #41017 from luxas/symlink_hyperkube 2017-02-10 15:59:43 -08:00
juju Merge pull request #40711 from spxtr/owner 2017-01-31 05:03:53 -08:00
kubemark Bump GCI to gci-beta-56-9000-80-0 2017-02-03 18:00:16 -08:00
lib Add test shell stack traces 2017-01-25 13:34:16 -05:00
libvirt-coreos Replace uses of --config with --pod-manifest-path 2017-02-07 14:32:37 -08:00
local Merge pull request #28469 from asalkeld/local-e2e 2016-09-11 05:44:47 -07:00
openstack-heat Merge pull request #40368 from sc68cal/patch/centos_name 2017-01-31 19:18:39 -08:00
ovirt
photon-controller Use ensure-temp-dir in the common.sh script 2017-01-19 09:30:50 -05:00
rackspace When calling chown, use : instead of . to separate the user and 2017-01-26 13:39:06 -08:00
saltbase Merge pull request #41035 from vishh/fluentd-critical 2017-02-13 05:10:19 -08:00
skeleton Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
ubuntu fix typo for cluster/* 2016-12-20 04:56:45 -08:00
vagrant Remove spxtr from several owners files, add rmmh as test reviewer. 2017-01-30 13:45:21 -08:00
vsphere Update generated for 2017 2017-01-01 23:11:09 -08:00
windows Fixed the issue with log rotation 2016-12-12 11:08:41 -05:00
BUILD Build release tarballs in bazel and add make bazel-release rule 2017-01-13 16:17:44 -08:00
clientbin.sh Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script. 2017-01-26 21:29:49 -08:00
common.sh Revert "Merge pull request #41132 from kubernetes/revert-40893-kubelet-auth" 2017-02-09 15:55:12 -08:00
get-kube-binaries.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
get-kube-local.sh Replace uses of --config with --pod-manifest-path 2017-02-07 14:32:37 -08:00
get-kube.sh Remove kube-up for vsphere 2016-12-22 20:15:37 +00:00
kube-down.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-push.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-up.sh Automatically download missing kube binaries in kube-up/kube-down. 2016-12-13 14:59:13 -08:00
kube-util.sh Use the e2e zone name as the cluster name. 2017-01-24 10:50:51 -08:00
kubeadm.sh Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script. 2017-01-26 21:29:49 -08:00
kubectl.sh Refactor the common parts of cluster/kube{ctl,adm}.sh into a util script. 2017-01-26 21:29:49 -08:00
log-dump.sh Added etcd-events to cluster logging 2017-01-06 10:28:48 +01:00
options.md Minion->Name rename: cluster/vagrant, docs and Vagrantfile 2015-12-02 12:45:12 -08:00
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00
README.md Fix typos and linted_packages sorting 2016-10-31 18:31:08 +01:00
restore-from-backup.sh Extend logging in restore-from-backup script 2016-12-21 15:10:47 +01:00
test-e2e.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-network.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
test-smoke.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
update-storage-objects.sh Remove "All rights reserved" from all the headers. 2016-06-29 17:47:36 -07:00
validate-cluster.sh Fixed cluster validation: added -q and project flags to gcloud. 2016-12-21 14:13:14 +01:00

README.md

Cluster Configuration

Deprecation Notice: This directory has entered maintenance mode and will not be accepting new providers. Please submit new automation deployments to kube-deploy. Deployments in this directory will continue to be maintained and supported at their current level of support.

The scripts and data in this directory automate creation and configuration of a Kubernetes cluster, including networking, DNS, nodes, and master components.

See the getting-started guides for examples of how to use the scripts.

cloudprovider/config-default.sh contains a set of tweakable definitions/parameters for the cluster.

The heavy lifting of configuring the VMs is done by SaltStack.

Analytics