2775 Commits

Author	SHA1	Message	Date
Kubernetes Prow Robot	834c9a5e3d	Merge pull request #72491 from liggitt/delegated-auth-permissions ... Ensure controller manager and scheduler can perform delegated auth checks	2019-02-08 11:53:52 -08:00
Kubernetes Prow Robot	b50c643be0	Merge pull request #73540 from rlenferink/patch-5 ... Updated OWNERS files to include link to docs	2019-02-08 09:05:56 -08:00
Jordan Liggitt	4212a9a05a	Ensure controller manager and scheduler can perform delegated auth checks	2019-02-08 11:15:52 -05:00
Davanum Srinivas	b975573385	move pkg/kubelet/apis/well_known_labels.go to staging/src/k8s.io/api/core/v1/ ... Co-Authored-By: Weibin Lin <linweibin1@huawei.com> Change-Id: I163b2f2833e6b8767f72e2c815dcacd0f4e504ea	2019-02-05 13:39:07 -05:00
Roy Lenferink	b43c04452f	Updated OWNERS files to include link to docs	2019-02-04 22:33:12 +01:00
Kubernetes Prow Robot	d654b49c0e	Merge pull request #73097 from bsalamat/fix_taint_nodes ... Add NotReady taint to new nodes during admission	2019-01-24 23:46:23 -08:00
Kubernetes Prow Robot	5fc286fb3c	Merge pull request #73102 from andrewsykim/add-openstack-pvl-admission ... Add Cinder to PersistentVolumeLabel Admission Controller	2019-01-24 14:55:12 -08:00
Kubernetes Prow Robot	e28c757e87	Merge pull request #72972 from liggitt/remove-alpha-initializers ... Remove use of alpha initializers	2019-01-24 14:54:52 -08:00
Andrew Kim	467a3e5f20	add andrewsykim, dims and msau42 as PVL admission OWNERS	2019-01-24 13:32:01 -05:00
Bobby (Babak) Salamat	763cb708d1	Autogenerated files	2019-01-24 10:31:23 -08:00
Bobby (Babak) Salamat	c2a4d2cbdf	Add a default admission controller to taint new nodes on creation.	2019-01-24 10:31:23 -08:00
andrewsykim	32b6225c72	refactor PVL unit tests to use test tables & add test cases for remaining cloud providers	2019-01-24 13:29:56 -05:00
andrewsykim	22fce22a7e	add support for Cinder volumes in PersistentVolumeLabel admission controller	2019-01-24 13:29:56 -05:00
andrewsykim	1a316015e3	refactor persistent volume labeler admission controller to use cloudprovider.PVLabler	2019-01-24 13:29:56 -05:00
Kubernetes Prow Robot	4cd759dbe0	Merge pull request #73001 from shivnagarajan/remove_deprecated_taints ... remove remaining deprecated taints from 1.9	2019-01-24 05:18:57 -08:00
Jordan Liggitt	1a15d80967	generated	2019-01-23 16:34:44 -05:00
Jordan Liggitt	17aa60686e	Deprecate and remove use of alpha metadata.initializers field, remove IncludeUninitialized options	2019-01-23 16:34:43 -05:00
Jordan Liggitt	52519ecb1c	remove deprecated openapi paths in favor of /openapi/v2	2019-01-21 16:33:41 -05:00
Shiv Nagarajan	36ee154243	remove deprecated taints from 1.9	2019-01-16 21:20:57 -05:00
Jordan Liggitt	9229399bd6	Remove build/verify scripts for swagger 1.2 API docs, API server swagger ui / swagger 1.2 config	2019-01-15 13:33:06 -05:00
Kubernetes Prow Robot	33a9c6e892	Merge pull request #72737 from liggitt/deprecate-deny-exec-admission ... Deprecate DenyEscalatingExec and DenyExecOnPrivileged admission plugins	2019-01-11 03:30:48 -08:00
Jordan Liggitt	61be3683f3	Deprecate DenyEscalatingExec and DenyExecOnPrivileged admission plugins	2019-01-10 11:57:12 -05:00
Kubernetes Prow Robot	cc67ccfd7f	Merge pull request #71731 from cheftako/leaseMetric ... Add gauge metric for master of leader election.	2019-01-08 08:57:53 -08:00
Jordan Liggitt	73dcfe12da	Stop checking VolumeScheduling feature gate	2018-12-27 17:45:45 -05:00
Walter Fender	f192657380	Add gauge metric for master of leader election. ... Fixes #71730 0 indicates standby, 1 indicates master, label indicates which lease. Tweaked name and documentation Factored in Mike Danese feedback. Removed dependency on prometheus from client-go using adapter. Centralized adapter import. Fixed godeps Fixed boilerplate. Put in fixes for caesarxuchao	2018-12-27 09:40:33 -08:00
Jordan Liggitt	0ff455e340	generated files	2018-12-19 11:19:12 -05:00
Jordan Liggitt	fd9e9b01b1	Remove uses of extensions/v1beta1 clients	2018-12-19 11:18:53 -05:00
wojtekt	546ece7b2c	Promote NodeLease to Beta and enable by default	2018-12-17 10:19:22 +01:00
k8s-ci-robot	5289fab2f6	Merge pull request #71396 from liggitt/forbidden-messages ... Improve node authorizer and noderestriction forbidden messages	2018-11-30 00:04:46 -08:00
k8s-ci-robot	79e5cb2cb7	Merge pull request #71302 from liggitt/verify-unit-test-feature-gates ... Split mutable and read-only access to feature gates, limit tests to readonly access	2018-11-29 21:45:12 -08:00
WanLinghao	0bab5ee5ad	Currently the root-ca-cert-publisher was shadowed by BoundServiceAccountTokenVolume feature gate. ... But its corresponding bootstrap RBAC policy was shadowed by TokenRequest feature gate. This patch fix it.	2018-11-27 11:44:35 +08:00
Jordan Liggitt	16e355791f	Improve node authorizer and noderestriction forbidden messages	2018-11-24 09:31:10 -05:00
Jordan Liggitt	2498ca7606	drop VerifyFeatureGatesUnchanged	2018-11-21 11:51:33 -05:00
k8s-ci-robot	ca696fef26	Merge pull request #69848 from mikedanese/projadmission ... migrate service account volume to a projected volume when BoundServiceAccountTokenVolumes are enabled	2018-11-16 22:46:23 -08:00
Mike Danese	1244ee6651	migrate service account volume to a projected volume ... When BoundServiceAccountTokenVolume feature is enabled.	2018-11-16 19:32:44 +00:00
Jordan Liggitt	733dd9dfd7	Add tests to ensure feature gate changes don't escape kubelet/scheduler packages	2018-11-16 10:52:53 -05:00
Jordan Liggitt	de8bf9b63d	fix scheduler and kubelet unit tests leaking feature flag changes	2018-11-16 10:52:53 -05:00
Jordan Liggitt	248d661327	Add tests to ensure storage feature gate changes don't escape packages	2018-11-16 10:52:53 -05:00
Jordan Liggitt	358c092abe	fix storage unit tests leaking feature flag changes	2018-11-16 10:52:52 -05:00
Michelle Au	fd64c08240	Fix storage feature gate test setting	2018-11-16 10:49:40 -05:00
k8s-ci-robot	1a54fd4319	Merge pull request #71021 from liggitt/node-self-deletion ... Remove self-deletion permissions from kubelets	2018-11-16 01:53:31 -08:00
Jordan Liggitt	8d7cc39031	Remove self-deletion permissions from kubelets	2018-11-14 00:42:06 -05:00
Jordan Liggitt	9fb2dcad5e	Limit kubelets from updating their own labels	2018-11-13 23:48:47 -05:00
k8s-ci-robot	94c5953904	Merge pull request #70699 from liggitt/controllerrevisions ... Include read access to controllerrevisions for admin/edit/view roles	2018-11-11 21:17:39 -08:00
Davanum Srinivas	954996e231	Move from glog to klog ... - Move from the old github.com/golang/glog to k8s.io/klog - klog as explicit InitFlags() so we add them as necessary - we update the other repositories that we vendor that made a similar change from glog to klog * github.com/kubernetes/repo-infra * k8s.io/gengo/ * k8s.io/kube-openapi/ * github.com/google/cadvisor - Entirely remove all references to glog - Fix some tests by explicit InitFlags in their init() methods Change-Id: I92db545ff36fcec83afe98f550c9e630098b3135	2018-11-10 07:50:31 -05:00
k8s-ci-robot	e133ab274d	Merge pull request #70515 from davidz627/feature/csiNodeInfo ... Add explicit "Installed" field to CSINodeInfo and change update semantics	2018-11-09 06:42:09 -08:00
David Zhu	4621887037	Updated test files with new fields	2018-11-08 19:45:01 -08:00
k8s-ci-robot	f212b9db23	Merge pull request #70598 from dims/switch-from-sigs.k8s.io/yaml-to-ghodss/yaml ... Switch to sigs.k8s.io/yaml from ghodss/yaml	2018-11-08 10:57:36 -08:00
k8s-ci-robot	3f5db92840	Merge pull request #68812 from WanLinghao/token_projection_ca_secret_create ... Create Ca-certificate configmap used by token projected volume	2018-11-08 10:57:25 -08:00
WanLinghao	efac533f92	To inject ca.crt into container when projected volume was specified, configmap should be created in each namespace. ... This patch add a controller called "root-ca-cert-publisher" to complete above job as well as some bootstrap rbac policies.	2018-11-08 11:33:47 +08:00