Taahir Ahmed
6a75e7c40c
ClusterTrustBundles: Define types
...
This commit is the main API piece of KEP-3257 (ClusterTrustBundles).
This commit:
* Adds the certificates.k8s.io/v1alpha1 API group
* Adds the ClusterTrustBundle type.
* Registers the new type in kube-apiserver.
* Implements the type-specfic validation specified for
ClusterTrustBundles:
- spec.pemTrustAnchors must always be non-empty.
- spec.signerName must be either empty or a valid signer name.
- Changing spec.signerName is disallowed.
* Implements the "attest" admission check to restrict actions on
ClusterTrustBundles that include a signer name.
Because it wasn't specified in the KEP, I chose to make attempts to
update the signer name be validation errors, rather than silently
ignored.
I have tested this out by launching these changes in kind and
manipulating ClusterTrustBundle objects in the resulting cluster using
kubectl.
2023-03-15 20:10:18 -07:00
Jordan Liggitt
4515889574
Prefer v1 storage versions
2021-03-02 12:06:13 -05:00
Benjamin Elder
56e092e382
hack/update-bazel.sh
2021-02-28 15:17:29 -08:00
Jordan Liggitt
a504445086
Generated files
...
Change-Id: I598d686849f4b97846757b227f5191bac031798b
2020-06-05 04:58:14 +00:00
Jordan Liggitt
e0f5cca410
Copy CSR v1beta1 to v1
...
* Remove prerelease tags
* Update copyright, package, imports to v1
* Remove signerName, usages, and condition status defaulting
2020-06-05 00:47:24 -04:00
Jeff Grafton
23ceebac22
Run hack/update-bazel.sh
2018-06-22 16:22:57 -07:00
David Eads
c5445d3c56
simplify api registration
2018-05-08 18:33:50 -04:00
David Eads
7b4f97aca3
generated
2018-05-08 18:32:44 -04:00
David Eads
8ae62517da
remove rootscopedkinds from groupmeta
2018-05-01 13:08:23 -04:00
David Eads
e7fbbe0e3c
eliminate indirection from type registration
2018-04-25 09:02:31 -04:00
Dr. Stefan Schimanski
cad0364e73
Update bazel
2017-10-18 17:24:04 +02:00
Dr. Stefan Schimanski
7773a30f67
pkg/api/legacyscheme: fixup imports
2017-10-18 17:23:55 +02:00
Jeff Grafton
aee5f457db
update BUILD files
2017-10-15 18:18:13 -07:00
Kubernetes Submit Queue
9f902fef24
Merge pull request #50094 from sttts/sttts-no-importprefix
...
Automatic merge from submit-queue (batch tested with PRs 50094, 48966, 49478, 50593, 49140)
apimachinery: remove pre-apigroups import path logic
Replacing #50093 .
2017-08-14 12:14:55 -07:00
Jeff Grafton
a7f49c906d
Use buildozer to delete licenses() rules except under third_party/
2017-08-11 09:32:39 -07:00
Jeff Grafton
33276f06be
Use buildozer to remove deprecated automanaged tags
2017-08-11 09:31:50 -07:00
Dr. Stefan Schimanski
8728576236
apimachinery: remove pre-apigroups import prefix logic
2017-08-10 13:07:54 +02:00
Chao Xu
cd7e7afaaa
run pkg/apis/make-origin-dir-compile, pkg/apis compile
2017-06-22 11:30:51 -07:00
Mike Danese
a05c3c0efd
autogenerated
2017-04-14 10:40:57 -07:00
deads2k
7cc9702402
separate announce factories
2017-01-23 08:02:14 -05:00
deads2k
9d3dfbf630
move apimachinery/announced to apimachinery
2017-01-20 12:20:13 -05:00
deads2k
dfd8db8ae9
allow API groups to be installed and registered in multiple schemes
2017-01-20 12:19:49 -05:00
Mike Danese
44b7246568
autogenerated
2017-01-19 14:24:45 -08:00
Mike Danese
96c146c8f2
promote certificates.k8s.io to beta
2017-01-19 13:13:20 -08:00
deads2k
6a4d5cd7cc
start the apimachinery repo
2017-01-11 09:09:48 -05:00
Jeff Grafton
20d221f75c
Enable auto-generating sources rules
2017-01-05 14:14:13 -08:00
Mike Danese
c87de85347
autoupdate BUILD files
2016-12-12 13:30:07 -08:00
Mike Danese
3b6a067afc
autogenerated
2016-10-21 17:32:32 -07:00
deads2k
6f745a2107
use groupmetafactoryregistry
2016-09-20 07:39:40 -04:00
deads2k
4aa61ddcb2
remove dead mapper
2016-09-19 09:57:19 -04:00
Daniel Smith
f1fd638962
fix register.go files up + add test import
2016-08-11 17:06:54 -07:00
David McMahon
ef0c9f0c5b
Remove "All rights reserved" from all the headers.
2016-06-29 17:47:36 -07:00
George Tankersley
f7f3e0f9e9
apis/certificates: initialize the certificates API group
2016-06-27 14:29:16 -07:00
