github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
60c3dd1bf7
kubernetes/hack
History
Kubernetes Submit Queue df47592d5a Merge pull request #48854 from colemickens/msi 
Automatic merge from submit-queue (batch tested with PRs 47066, 48892, 48933, 48854, 48894)

azure: msi: add managed identity field, logic

**What this PR does / why we need it**: Enables managed service identity support for the Azure cloudprovider. "Managed Service Identity" allows us to ask the Azure Compute infra to provision an identity for the VM. Users can then retrieve the identity and assign it RBAC permissions to talk to Azure ARM APIs for the purpose of the cloudprovider needs.

Per the commit text:
```
The azure cloudprovider will now use the Managed Service Identity
to retrieve access tokens for the Azure ARM APIs, rather than
requiring hard-coded, user-specified credentials.
```

**Which issue this PR fixes** *(optional, in `fixes #<issue number>(, fixes #<issue_number>, ...)` format, will close that issue when PR gets merged)*: n/a 

**Special notes for your reviewer**: none

**Release note**:

```release-note
azure: support retrieving access tokens via managed identity extension
```

cc: @brendandburns @jdumars @anhowe
2017-07-14 12:50:55 -07:00
..
boilerplate Enable auto-generating sources rules 2017-01-05 14:14:13 -08:00
cmd/teststale
e2e-internal Split federation-{up,down} from e2e-{up,down}. 2017-02-24 14:27:31 -08:00
gen-swagger-doc correct the script name for generating swagger doc 2017-06-09 14:25:32 +08:00
jenkins Export patch files to artifacts 2017-03-25 12:16:50 -07:00
lib godep-save.sh: add sanity checks 2017-07-07 21:16:34 +02:00
make-rules Merge pull request #47719 from xilabao/fix-set-selector-1 2017-07-11 23:09:13 -07:00
testdata Add test from #47578 2017-06-21 10:56:00 -07:00
verify-flags Merge pull request #46360 from khenidak/azure-pd-final 2017-07-14 09:57:51 -07:00
.linted_packages add pkg/credentailprovider/azure to hack/.linted_packages 2017-07-13 14:29:11 -07:00
autogenerated_placeholder.txt
benchmark-go.sh unify newline format for benchmark-go.sh 2016-12-10 01:15:30 -08:00
BUILD Disable verify-gofmt bazel test 2017-06-08 14:59:55 -07:00
build-cross.sh
build-go.sh
build-ui.sh move swagger route to apiserver 2017-02-01 15:18:32 -05:00
cherry_pick_pull.sh Regenerate docs (if necessary) during cherry-pick operations. 2017-06-08 13:18:20 -07:00
dev-build-and-push.sh hack/dev-build-*: Run dev build instead of release build 2016-12-15 10:35:16 -07:00
dev-build-and-up.sh hack/dev-build-*: Run dev build instead of release build 2016-12-15 10:35:16 -07:00
dev-push-hyperkube.sh Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
e2e_test.go Fix e2e_test.go 2017-07-05 14:24:25 -07:00
e2e-node-test.sh
e2e.go Return a slightly more verbose error when "go get" fails. 2017-06-30 12:06:27 -07:00
federated-ginkgo-e2e.sh Default FEDERATION_KUBE_CONTEXT to FEDERATION_NAME in federation e2e up/down scripts. 2017-04-05 18:47:03 -07:00
generate-bindata.sh Use cos-stable-59-9460-64-0 instead of cos-beta-59-9460-20-0. 2017-06-16 13:48:50 -07:00
generate-docs.sh Move .generated_docs to docs/ so docs OWNERS can review / approve 2017-02-16 10:11:57 -08:00
get-build.sh
ginkgo-e2e.sh Make cluster IP range an argument to ginkgo to fix firewall test 2017-06-30 16:18:18 +02:00
godep-restore.sh hack/godep-restore.sh: use godep v79 which works 2017-03-12 18:43:10 +01:00
godep-save.sh godep-save.sh: workaround broken vendor/github.com/docker/docker/project/CONTRIBUTING.md symlink 2017-07-10 13:02:38 +02:00
grab-profiles.sh
install-etcd.sh
list-feature-tests.sh
local-up-cluster.sh Merge pull request #48037 from wanghaoran1988/add_bootstrap_option 2017-06-30 14:34:32 -07:00
lookup_pull.py update url information to prevent http 304 redirection 2017-05-25 14:05:02 +08:00
OWNERS hack/OWNERS: add myself (sttts) 2017-07-08 11:01:03 +02:00
print-workspace-status.sh Convert go_binary linkstamp to x_defs 2017-06-08 14:59:55 -07:00
run-in-gopath.sh
test-cmd.sh
test-go.sh
test-integration.sh Remove unnecessary wrapper flags 2017-06-07 12:31:01 -04:00
test-update-storage-objects.sh Support storageclass storage upgrades to v1 2017-05-24 10:43:56 -04:00
update_owners.py Name change: s/timstclair/tallclair/ 2017-07-10 14:05:46 -07:00
update-all.sh revert hack/update-all to its original form 2017-06-22 11:31:04 -07:00
update-api-reference-docs.sh update generation bash to handle vendor dir 2017-01-17 09:06:34 -05:00
update-bazel.sh Update gazel to v17 2017-04-27 15:01:34 -07:00
update-codecgen.sh change hack/update-codecgen.sh 2017-06-22 11:30:58 -07:00
update-codegen.sh hack/lib/init.sh util.sh update-codegen.sh 2017-06-22 11:30:57 -07:00
update-federation-api-reference-docs.sh update generation bash to handle vendor dir 2017-01-17 09:06:34 -05:00
update-federation-generated-swagger-docs.sh update generation bash to handle vendor dir 2017-01-17 09:06:34 -05:00
update-federation-openapi-spec.sh Fix hack/update-federation-openapi-spec.sh flakyness 2017-05-19 15:39:08 -07:00
update-federation-swagger-spec.sh Federation does not generate swagger spec correctly 2017-01-06 23:45:04 -05:00
update-generated-docs.sh Move .generated_docs to docs/ so docs OWNERS can review / approve 2017-02-16 10:11:57 -08:00
update-generated-protobuf-dockerized.sh spell check for test/* 2016-12-14 06:03:00 -08:00
update-generated-protobuf.sh Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
update-generated-runtime-dockerized.sh Update hack scripts 2017-06-09 10:13:34 +08:00
update-generated-runtime.sh Rename build-tools/ back to build/ 2016-12-14 13:42:15 -08:00
update-generated-swagger-docs.sh Add priority and condition to column definitions 2017-05-29 18:23:48 -04:00
update-godep-licenses.sh
update-gofmt.sh hack/*.sh: re-add staging dirs to verify+update scripts 2017-02-17 08:51:31 +01:00
update-openapi-spec.sh Fix race in service IP allocation repair loop 2016-12-26 21:59:27 -08:00
update-staging-client-go.sh Use "hack/godep-restore.sh" instead of godep restore 2017-03-28 04:05:47 -04:00
update-staging-godeps.sh include k8s.io/api in update-godep-staging.sh 2017-06-22 16:58:53 -07:00
update-swagger-spec.sh hack/update-swagger-spec.sh: use posix regex syntax 2017-05-31 11:57:03 +02:00
update-translations.sh Extract a bunch more strings from kubectl 2017-04-06 20:12:50 -07:00
verify-all.sh
verify-api-groups.sh add "admission" API group 2017-05-19 10:17:37 -06:00
verify-api-reference-docs.sh
verify-bazel.sh Update gazel to v17 2017-04-27 15:01:34 -07:00
verify-boilerplate.sh Add a build rule for the boilerplate unit test. 2017-01-01 22:54:32 -08:00
verify-cli-conventions.sh More cli sanity verifications 2017-05-18 15:44:49 -03:00
verify-codecgen.sh add apiregistration types 2016-12-06 13:45:10 -05:00
verify-codegen.sh Rename {kube- ->}apiextensions-{-> api}server 2017-06-06 12:06:31 +02:00
verify-description.sh
verify-federation-api-reference-docs.sh Adding verify-federation-api-reference-docs.sh 2017-05-14 17:20:24 -07:00
verify-federation-generated-swagger-docs.sh Adding verify-federation-generated-swagger-docs.sh 2017-05-14 17:20:24 -07:00
verify-federation-openapi-spec.sh Add verify script federation OpenAPI spec generation 2016-11-07 02:41:50 -08:00
verify-federation-swagger-spec.sh Adding verify-federation-swagger-spec.sh 2017-05-14 17:15:41 -07:00
verify-flags-underscore.py check flag format in file known-flags.txt 2017-05-22 10:51:04 +08:00
verify-generated-docs.sh Move .generated_docs to docs/ so docs OWNERS can review / approve 2017-02-16 10:11:57 -08:00
verify-generated-protobuf.sh Remove unused sub-pkgs in pkg/util 2017-07-04 12:04:06 +08:00
verify-generated-runtime.sh Update hack scripts 2017-06-09 10:13:34 +08:00
verify-generated-swagger-docs.sh
verify-godep-licenses.sh
verify-godeps.sh Fix godep verify to use godep restore script 2017-07-07 23:16:54 -07:00
verify-gofmt.sh Fixed the issue with formatting issues not being reported when verification fails. 2017-06-12 17:59:08 +02:00
verify-golint.sh Check if golint exists first in hack/verify-golint.sh 2017-07-05 14:51:51 +08:00
verify-govet.sh Run hack/verify-govet.sh as part of verify make target 2017-06-21 11:10:25 -07:00
verify-import-boss.sh
verify-linkcheck.sh
verify-no-vendor-cycles.sh remove excpetion in verify-no-vendor-cycles.sh 2017-05-15 20:17:38 -07:00
verify-openapi-spec.sh verify-openapi-spec.sh should not ignore extra file in the spec folder api/openapi-spec 2016-11-01 01:13:11 -07:00
verify-pkg-names.sh add "admission" API group 2017-05-19 10:17:37 -06:00
verify-readonly-packages.sh hack/*.sh: re-add staging dirs to verify+update scripts 2017-02-17 08:51:31 +01:00
verify-staging-client-go.sh hack/verify-staging-client-go.sh: fail on changes 2017-02-27 14:11:41 +01:00
verify-staging-godeps.sh update-staging-{client-go,godeps}.sh: no godep-restore, pin godep, check workdir 2017-02-25 22:38:23 +01:00
verify-staging-imports.sh client-go: remove TPR example 2017-07-07 14:13:46 +02:00
verify-swagger-spec.sh
verify-symbols.sh spell check for test/* 2016-12-14 06:03:00 -08:00
verify-test-images.sh
verify-test-owners.sh Disable verify-test-owners.sh and make go vet more obvious 2016-12-21 11:44:04 -08:00