Kubernetes Submit Queue 60dc2fa5d8 Merge pull request #35675 from liggitt/pv-secrets ...

Automatic merge from submit-queue

Require PV provisioner secrets to match type

In 1.5, PV provisioners are allowing targeting namespaced secrets via storageclass params. This adds a requirement that those secrets' type match the volume provisioner plugin name, to prevent targeting and extraction of arbitrary secrets

Helps limit secret targeting issues mentioned in https://github.com/kubernetes/kubernetes/issues/34822

2016-10-30 02:41:05 -07:00

..

nestedpendingoperations

Add sync state loop in master's volume reconciler

2016-10-28 09:24:53 -07:00

operationexecutor

Add sync state loop in master's volume reconciler

2016-10-28 09:24:53 -07:00

types

autogenerated

2016-10-21 17:32:32 -07:00

volumehelper

autogenerated

2016-10-21 17:32:32 -07:00

atomic_writer_test.go

Add mode permission bits to configmap, secrets and downwardAPI

2016-08-17 14:44:41 -04:00

atomic_writer.go

Typos and englishify pkg/volume

2016-10-03 22:39:33 +02:00

BUILD

autogenerated

2016-10-21 17:32:32 -07:00

device_util_linux_test.go

fix go vet errors

2016-08-10 16:45:41 -07:00

device_util_linux.go

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

device_util_unsupported.go

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

device_util.go

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

doc.go

Use Go canonical import paths

2016-07-16 13:48:21 -04:00

fs_unsupported.go

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

fs.go

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

io_util.go

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

util.go

Require PV provisioner secrets to match type

2016-10-27 02:45:05 -04:00