Kubernetes Submit Queue f47707129c Merge pull request #31927 from timstclair/psp ...

Automatic merge from submit-queue

Fix PSP volumes error message

Was:
```
Error from server: error when creating "pause-pod.yaml": pods "pause" is forbidden: unable to validate against any pod security policy: [spec.containers[0].securityContext.volumes[0]: Invalid value: "secret": secret volumes are not allowed to be used]
```
Now:
```
Error from server: error when creating "pause-pod.yaml": pods "pause" is forbidden: unable to validate against any pod security policy: [spec.volumes[0]: Invalid value: "secret": secret volumes are not allowed to be used]
```

Also, only perform the validation once (by moving it from `ValidateContainerSecurityContext` to `ValidatePodSecurityContext`).

---

1.4 Justification:

- Risk: low, this is just altering an error message
- Rollback: nothing should depend on this functionality
- Cost: the old error message didn't make any sense (there are no volumes on a container SecurityContext). This is fixing a bug.

2016-09-02 22:04:16 -07:00

..

admission

Fix usage of shared informer in namespace admission controllers

2016-08-01 13:40:34 -04:00

api

Merge pull request #31834 from wongma7/pvc-genclient

2016-09-01 15:01:13 -07:00

apimachinery

Make registered more testable

2016-08-15 17:35:10 -07:00

apis

Merge pull request #31887 from liggitt/certificates-group

2016-09-02 15:08:55 -07:00

apiserver

Log useful information on 500's

2016-08-31 13:46:40 -07:00

auth

Merge pull request #30369 from lixiaobing10051267/masterQuote

2016-08-23 00:19:25 -07:00

capabilities

Use Go canonical import paths

2016-07-16 13:48:21 -04:00

client

Merge pull request #31887 from liggitt/certificates-group

2016-09-02 15:08:55 -07:00

cloudprovider

Merge pull request #31090 from justinsb/fix_29324

2016-09-02 16:19:57 -07:00

controller

gc retries failed garbage collection

2016-09-02 14:17:42 -07:00

conversion

Introduce GroupVersioner for capturing desired target version

2016-08-18 14:45:00 -04:00

credentialprovider

Wrong path for log_handler.go

2016-07-27 16:04:20 +08:00

dns

Implement ExternalName in kube-dns

2016-08-23 00:55:47 -04:00

fieldpath

Fix default resource limits (node capacities) for downward api volumes

2016-08-16 14:41:17 -04:00

fields

make labels, fields expose selectable requirements

2016-08-20 10:10:51 -07:00

genericapiserver

Revert "Enable v3 Client as the default on UTs"

2016-08-24 13:16:40 -07:00

healthz

fixes the wrong doc in package healthz

2016-07-18 22:46:09 +08:00

httplog

Log useful information on 500's

2016-08-31 13:46:40 -07:00

hyperkube

Use Go canonical import paths

2016-07-16 13:48:21 -04:00

kubectl

Merge pull request #31510 from mksalawa/kubectltop

2016-09-01 11:30:16 -07:00

kubelet

Merge pull request #32002 from mikedanese/spammy

2016-09-02 18:51:10 -07:00

kubemark

Kubelet Refactoring

2016-08-25 10:57:31 -07:00

labels

Don't validate selector that is already validated

2016-08-22 09:39:32 +02:00

master

return destroy func to clean up internal resources of storage

2016-08-25 08:32:21 -07:00

metrics

Remove "All rights reserved" from all the headers.

2016-06-29 17:47:36 -07:00

probe

Merge pull request #27562 from 7ing/ipt

2016-08-02 08:02:32 -07:00

proxy

Merge pull request #31485 from m1093782566/m109-proxy-fix-naming

2016-08-26 01:53:24 -07:00

quota

Fix quota constraints func for pvc

2016-08-22 14:18:15 -04:00

registry

Added printing of clarification for object creation request in case of object is in the process of graceful deletion

2016-09-01 16:39:48 +00:00

runtime

add ClusterName field to ObjectMeta

2016-08-22 21:09:57 -07:00

security

Fix PSP volumes error message

2016-09-01 15:55:34 -07:00

securitycontext

Remove pod mutation for PVs with supplemental GIDs

2016-07-22 17:41:44 -04:00

selection

make labels, fields expose selectable requirements

2016-08-20 10:10:51 -07:00

serviceaccount

Check for valid serviceaccount JWT token before inspecting claims

2016-07-06 14:25:15 -04:00

ssh

Revert "Add a customized ssh dialer that will timeout"

2016-07-14 08:48:24 +02:00

storage

refactor destroy func in unit testing

2016-08-25 22:57:28 -07:00

types

Add Federated Ingress Controller.

2016-08-22 12:59:54 -07:00

ui

Use Go canonical import paths

2016-07-16 13:48:21 -04:00

util

AppArmor was flipped to beta, update feature gate

2016-08-29 10:22:05 -07:00

version

Split the version metric out to its own package

2016-08-24 11:47:16 -07:00

volume

Merge pull request #31837 from jingxu97/recorder

2016-09-01 23:30:57 -07:00

watch

Update generated files due to dependency shift.

2016-08-09 10:41:09 -05:00

OWNERS

Remove bgrant from pkg/OWNERS and pkg/kubectl/OWNERS since he has plenty to do.

2016-06-16 08:21:27 -07:00