kubernetes/pkg/kubeapiserver/options
Monis Khan b5ef684d90
admission: run PodSecurity before PodSecurityPolicy
This change fixes the order in which the PodSecurity and
PodSecurityPolicy admission plugins are run.  The old code intended
for PSA to run before PSP, but attempted to enforce that via
registration order (which is irrelevant).  Now PSA is correctly
executed before PSP to allow for audit and warning modes to be
exercised even in the presence of a deny PSP policy.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-09-01 11:39:58 -04:00
..
testdata add ability to authenticators for dynamic update of certs 2019-10-01 09:50:20 -04:00
admission_test.go Clean up initializer-related comments, test data 2019-01-25 12:37:45 -05:00
admission.go Optimize some codes 2021-03-05 18:23:39 +08:00
authentication_test.go allow multiple of --service-account-issuer 2021-04-19 09:54:11 -07:00
authentication.go Remove ServiceAccountIssuerDiscovery feature gate 2021-07-14 18:43:59 +08:00
authorization_test.go validate authorization flags in BuiltInAuthorizationOptions.Validate 2018-03-26 20:37:02 +08:00
authorization.go Optimize some codes 2021-03-05 18:23:39 +08:00
cloudprovider.go fix golint failures in pkg/kubeapiserver/options, rename receiver name of BuiltInAuthorizationOptions to o 2020-07-23 18:52:15 +08:00
options.go run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00
plugins_test.go Ensure webhook/quota/deny admission comes last 2020-02-25 21:54:14 -05:00
plugins.go admission: run PodSecurity before PodSecurityPolicy 2021-09-01 11:39:58 -04:00
serving.go run hack/update-netparse-cve.sh 2021-08-20 10:42:09 +02:00