kubernetes/contrib
Stef Walter f6da3fdbe1 kubectl: Add proxy --unix-socket=/file/path option
Proxies on a TCP port are accessible outside the current security
context (eg: uid). Add support for having the proxy listen on a
unix socket, which has permissions applied to it.

We make sure the socket starts its life only accessible by the
current user using Umask.

This is useful for applications like Cockpit and other tools which
want the help of kubectl to handle authentication, configuration and
transport security, but also want to not make that accessible to
all users on a multi-user system.
2015-08-06 11:56:47 +02:00
..
ansible Ansible updates for Atomic. 2015-07-24 18:29:55 -04:00
completions/bash kubectl: Add proxy --unix-socket=/file/path option 2015-08-06 11:56:47 +02:00
diurnal rewrite go imports 2015-08-05 17:30:03 -07:00
exec-healthz Replace ``shell with ``sh 2015-07-19 21:38:53 -07:00
for-demos Add a simple hostport-to-service proxy 2015-06-26 21:55:18 -07:00
for-tests rewrite go imports 2015-08-05 17:30:03 -07:00
git-sync rewrite go imports 2015-08-05 17:30:03 -07:00
go2docker Add ga-beacon analytics to gendocs scripts 2015-05-15 18:56:38 -07:00
init/systemd Update kube-apiserver unit files for systemd 2015-07-28 14:36:56 -04:00
logging Update the fluentd-gcp images to include their latest Dockerfile changes. 2015-07-24 01:27:42 +00:00
mesos run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
pod-master rewrite go imports 2015-08-05 17:30:03 -07:00
podex Add ga-beacon analytics to gendocs scripts 2015-05-15 18:56:38 -07:00
prometheus Modularized implementation of prompush json with e2e running pending push gateway gauges. 2015-07-28 09:29:57 -04:00
recipes Fix misspellings in documentation 2015-06-05 11:35:17 -04:00
release-notes Update release notes tool and documentation 2015-07-07 17:40:10 -07:00
service-loadbalancer run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
submit-queue rewrite go imports 2015-08-05 17:30:03 -07:00