33 Commits

Author	SHA1	Message	Date
mtardy	36a2156033	Add a SecurityContextDeny feature gate disabled by default ... Put plugin registration behind the feature gate.	2023-03-13 10:18:08 +01:00
mtardy	5049382a81	Scdeny admission plugin: add warning on register	2023-02-19 13:09:21 +01:00
Jordan Liggitt	61774cd717	Plumb context to admission Admit/Validate	2019-08-20 11:11:00 -04:00
Mehdy Bohlool	d08bc3774d	Mechanical changes due to signature change for Admit and Validate functions	2019-02-16 13:28:47 -08:00
tanshanshan	76471eef36	simplify the if logic	2018-02-07 11:04:33 +08:00
hzxuzhonghu	7c5f9e0bba	refactor admission flag: add two admission flags and make plugins auto in recommended order	2018-01-19 13:16:36 +08:00
Dr. Stefan Schimanski	012b085ac8	pkg/apis/core: mechanical import fixes in dependencies	2017-11-09 12:14:08 +01:00
David Eads	75c448dbc7	make easy validation admission plugins into validators	2017-11-03 07:54:39 -04:00
Dr. Stefan Schimanski	131905cdb8	admission: unify plugin constructors	2017-10-30 16:56:38 +01:00
p0lyn0mial	c5019bf696	remove init blocks from all admission plugins	2017-05-23 22:00:32 +02:00
p0lyn0mial	3f8d6e9210	Change all the existing admission init blocks to call a Register function ... this is a two stage refactor when done there will be no init block in admission plugins. Instead all plugins expose Register function which accept admission.Plugins instance. The registration to global plugin registry happens inside Register func.	2017-05-18 22:25:01 +02:00
Dr. Stefan Schimanski	63f547e1b1	pkg/admission: make plugin registry non-global	2017-04-12 11:37:25 +02:00
deads2k	01b3b2b461	move admission to genericapiserver	2017-01-18 08:15:19 -05:00
deads2k	77b4d55982	mechanical	2017-01-16 09:35:12 -05:00
deads2k	2861509b6d	refactored admission to avoid internal client references	2017-01-03 15:50:12 -05:00
Matt Liggett	c86b84ccc0	Add /eviction subresource. ... This is for #12611.	2016-08-22 16:38:00 -07:00
David McMahon	ef0c9f0c5b	Remove "All rights reserved" from all the headers.	2016-06-29 17:47:36 -07:00
Clayton Coleman	588f15844b	Add init container support to other admission controllers	2016-05-18 22:32:25 -04:00
deads2k	0061479890	fully qualify admission resources and kinds	2016-04-26 07:55:33 -04:00
Chao Xu	184440f8ef	rename release_1_2 to internalclientset	2016-02-05 14:02:28 -08:00
Chao Xu	f9f5736b01	grep sed	2016-02-03 13:06:07 -08:00
Chao Xu	cddd7b56a4	replace client with clientset in kubelet and other places	2016-02-02 20:28:45 -08:00
deads2k	9fda7f1812	update StatusDetails to handle Groups	2015-12-17 09:14:12 -05:00
deads2k	3f045cf168	udpate admission for API groups	2015-12-07 08:55:01 -05:00
Paul Morie	3cd12f5e05	FSGroup implementation	2015-10-22 16:40:59 -04:00
Paul Morie	393e2bc019	Inline some SecurityContext fields into PodSecurityContext	2015-10-21 19:01:17 -04:00
Sami Wagiaalla	030f882f06	Add Support for supplemental groups	2015-10-20 12:44:32 -04:00
Kris Rousey	ae6c64d9bb	Moving everyone to unversioned client	2015-08-18 10:23:03 -07:00
Mike Danese	8e33cbfa28	rewrite go imports	2015-08-05 17:30:03 -07:00
Cesar Wong	68ad63b5e2	Add operation checking to admission control handlers ... Adds a new method to the handler interface that returns true only if the admission control handler handles that operation.	2015-05-21 13:51:43 -04:00
Zach Loafman	875e83a741	Revert "Revert "Security context - types, kubelet, admission""	2015-05-05 16:02:13 -07:00
Zach Loafman	f48904fd5e	Revert "Security context - types, kubelet, admission"	2015-05-05 15:20:39 -07:00
Paul Weil	982bf19c20	security context initial implementation - squash	2015-05-05 13:46:13 -04:00