kubernetes/pkg
Stef Walter f6da3fdbe1 kubectl: Add proxy --unix-socket=/file/path option
Proxies on a TCP port are accessible outside the current security
context (eg: uid). Add support for having the proxy listen on a
unix socket, which has permissions applied to it.

We make sure the socket starts its life only accessible by the
current user using Umask.

This is useful for applications like Cockpit and other tools which
want the help of kubectl to handle authentication, configuration and
transport security, but also want to not make that accessible to
all users on a multi-user system.
2015-08-06 11:56:47 +02:00
..
admission run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
api rewrite all links to issues to k8s links 2015-08-05 21:11:11 -07:00
apiserver rewrite all links to prs to k8s links 2015-08-05 21:11:11 -07:00
auth run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
capabilities Add optional throttling to the proxy/exec/attach methods 2015-07-29 13:51:20 -07:00
client run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
clientauth rewrite go imports 2015-08-05 17:30:03 -07:00
cloudprovider run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
controller run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
conversion rewrite go imports 2015-08-05 17:30:03 -07:00
credentialprovider run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
expapi rewrite go imports 2015-08-05 17:30:03 -07:00
fieldpath rewrite go imports 2015-08-05 17:30:03 -07:00
fields Make copyright ownership statement generic 2015-05-01 17:49:56 -04:00
healthz DefaultMux should only register the first time 2015-05-16 16:11:24 -04:00
httplog Make copyright ownership statement generic 2015-05-01 17:49:56 -04:00
hyperkube Make copyright ownership statement generic 2015-05-01 17:49:56 -04:00
kubectl kubectl: Add proxy --unix-socket=/file/path option 2015-08-06 11:56:47 +02:00
kubelet rewrite all links to issues to k8s links 2015-08-05 21:11:11 -07:00
labels rewrite go imports 2015-08-05 17:30:03 -07:00
master Remove unused members 2015-08-06 09:00:42 +02:00
probe rewrite go imports 2015-08-05 17:30:03 -07:00
proxy run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
registry Merge pull request #12320 from mikedanese/rewrite-pr-issue-links 2015-08-06 09:55:44 +02:00
runtime rewrite go imports 2015-08-05 17:30:03 -07:00
securitycontext rewrite go imports 2015-08-05 17:30:03 -07:00
storage run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
tools Move etcd storage to pkg/storage/etcd 2015-07-30 15:42:06 +02:00
types Make copyright ownership statement generic 2015-05-01 17:49:56 -04:00
ui rewrite go imports 2015-08-05 17:30:03 -07:00
util util: Add util.Umask wrapper 2015-08-06 11:39:29 +02:00
version run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
volume rewrite all links to issues to k8s links 2015-08-05 21:11:11 -07:00
volumeclaimbinder run gofmt on everything we touched 2015-08-05 17:52:56 -07:00
watch run gofmt on everything we touched 2015-08-05 17:52:56 -07:00