github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2026-07-17 02:06:23 +00:00
Code Issues Projects Releases Wiki Activity

refactor and reviews

Browse Source 
fixes insecure handler chaining

reviews

revert clock

review clock
This commit is contained in:
yue9944882
2019-08-22 21:58:00 +08:00
committed by Mike Spreitzer
parent 04388e22c5
commit 79b587fe8d
21 changed files with 278 additions and 276 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
api/openapi-spec/swagger.json generated
View File

@@ -13831,7 +13831,7 @@
"type": "object"
},
"io.k8s.api.flowcontrol.v1alpha1.FlowSchema": {
"description": "FlowSchema defines the schema of a group of flows. Note that a flow makes up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".",
"description": "FlowSchema defines the schema of a group of flows. Note that a flow is made up of a set of inbound API requests with similar attributes and is identified by a pair of strings: the name of the FlowSchema and a \"flow distinguisher\".",
"properties": {
"apiVersion": {
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources",
@@ -13929,7 +13929,7 @@
"properties": {
"distinguisherMethod": {
"$ref": "#/definitions/io.k8s.api.flowcontrol.v1alpha1.FlowDistinguisherMethod",
"description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the computation always yields the empty string."
"description": "`distinguisherMethod` defines how to compute the flow distinguisher for requests that match this schema. `nil` specifies that the distinguisher is disabled and thus will always be the empty string."
},
"matchingPrecedence": {
"description": "`matchingPrecedence` is used to choose among the FlowSchemas that match a given request. The chosen FlowSchema is among those with the numerically lowest (which we take to be logically highest) MatchingPrecedence. Each MatchingPrecedence value must be non-negative.",
@@ -13941,7 +13941,7 @@
"description": "`priorityLevelConfiguration` should reference a PriorityLevelConfiguration in the cluster. If the reference cannot be resolved, the flow-schema will ignored and marked as invalid in its status. Required."
},
"rules": {
"description": "`rules` describes which requests will match this flow schema.",
"description": "`rules` describes which requests will match this flow schema. The flow-schema applies if any rule matches.",
"items": {
"$ref": "#/definitions/io.k8s.api.flowcontrol.v1alpha1.PolicyRuleWithSubjects"
},
@@ -13970,7 +13970,7 @@
"description": "PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.",
"properties": {
"apiGroups": {
"description": "`apiGroups` is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. APIGroupAll represents all api groups.",
"description": "`apiGroups` is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. '*' represents all api groups.",
"items": {
"type": "string"
},
@@ -13991,7 +13991,7 @@
"type": "array"
},
"verbs": {
"description": "`verbs` is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.",
"description": "`verbs` is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all verbs.",
"items": {
"type": "string"
},
@@ -14134,16 +14134,16 @@
"description": "PriorityLevelConfigurationSpec is specification of a priority level",
"properties": {
"assuredConcurrencyShares": {
"description": "`assuredConcurrencyShares` is a positive number for a non-exempt priority level, representing the weight by which the priority level shares the concurrency from the global limit. The concurrency limit of an apiserver is divided among the non-exempt priority levels in proportion to their assured concurrency shares. Basically this produces the assured concurrency value (ACV) for each priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )",
"description": "`assuredConcurrencyShares` is a positive number for a non-exempt priority level. The concurrency limit of an apiserver is divided among the non-exempt priority levels in proportion to their assured concurrency shares. Basically this produces the assured concurrency value (ACV) for each priority level:\n\n ACV(l) = ceil( SCL * ACS(l) / ( sum[priority levels k] ACS(k) ) )",
"format": "int32",
"type": "integer"
},
"exempt": {
"description": "`exempt` defines whether the priority level is exempted or not. There should be at most one exempt priority level. Being exempt means that requests of that priority are not subject to concurrency limits (and thus are never queued) and do not detract from the concurrency available for non-exempt requests. In a more sophisticated system, the exempt priority level would be the highest priority level. The field is default to false and only those system preset priority level can be exempt.",
"description": "`exempt` defines whether the priority level is exempted or not. There should be at most one exempt priority level. Being exempt means that requests of that priority are not subject to concurrency limits (and thus are never queued) and do not detract from the concurrency available for non-exempt requests. The field is default to false and only those system preset priority level can be exempt.",
"type": "boolean"
},
"handSize": {
"description": "`handSize` is a small positive number for applying shuffle sharding. When a request arrives at an apiserver the request flow identifier’s string pair is hashed and the hash value is used to shuffle the queue indices and deal a hand of the size specified here. If empty, the hand size will the be set to 1.",
"description": "`handSize` is a small positive number for applying shuffle sharding. When a request arrives at an apiserver the request flow identifier’s string pair is hashed and the hash value is used to shuffle the queue indices and deal a hand of the size specified here. If empty, the hand size will the be set to 1. NOTE: To figure out a better value for your cluster, please refer to (#76846)[https://github.com/kubernetes/kubernetes/issues/76846#issuecomment-523700960]",
"format": "int32",
"type": "integer"
},