Kubernetes Submit Queue 60dc2fa5d8 Merge pull request #35675 from liggitt/pv-secrets ... Automatic merge from submit-queue Require PV provisioner secrets to match type In 1.5, PV provisioners are allowing targeting namespaced secrets via storageclass params. This adds a requirement that those secrets' type match the volume provisioner plugin name, to prevent targeting and extraction of arbitrary secrets Helps limit secret targeting issues mentioned in https://github.com/kubernetes/kubernetes/issues/34822		2016-10-30 02:41:05 -07:00
..
nestedpendingoperations	Add sync state loop in master's volume reconciler	2016-10-28 09:24:53 -07:00
operationexecutor	Add sync state loop in master's volume reconciler	2016-10-28 09:24:53 -07:00
types	autogenerated	2016-10-21 17:32:32 -07:00
volumehelper	autogenerated	2016-10-21 17:32:32 -07:00
atomic_writer_test.go	Add mode permission bits to configmap, secrets and downwardAPI	2016-08-17 14:44:41 -04:00
atomic_writer.go	Typos and englishify pkg/volume	2016-10-03 22:39:33 +02:00
BUILD	autogenerated	2016-10-21 17:32:32 -07:00
device_util_linux_test.go	fix go vet errors	2016-08-10 16:45:41 -07:00
device_util_linux.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
device_util_unsupported.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
device_util.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
doc.go	Use Go canonical import paths	2016-07-16 13:48:21 -04:00
fs_unsupported.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
fs.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
io_util.go	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
util.go	Require PV provisioner secrets to match type	2016-10-27 02:45:05 -04:00